ThreatExpert Report: Adware.DigitalNames, not-a-virus:AdWare.Win32.DigitalNames.l

Visit ThreatExpert web site

Close Report

Submission Summary:

Submission details:

Submission received: 23 June 2008, 02:44:00
Processing time: 3 min 22 sec
Submitted sample:

File MD5: 0x87B7A421B118F1DB6163A5B9FCCD7105
File SHA-1: 0x9F9D7BD1F89AC3FD87D49337A8873265A035374A
Filesize: 249,856 bytes
Alias:

Adware.DigitalNames [PCTools]
not-a-virus:AdWare.Win32.DigitalNames.l [Kaspersky Lab]

Summary of the findings:

What's been found	Severity Level
Downloads/requests other files from Internet.
Contains characteristics of an identified security risk.

Technical Details:

Possible Security Risk

Attention! Characteristics of the following security risk was identified in the system:

Security Risk	Description
Adware.DigitalNames	DigitalNames is a potentially unwated application which might have legitimate uses. It helps users find websites by just typing search keywords in the address bar without having to type the entire URL. It sends the search keywords to its own server and may produce pop-ups related to those keywords.

Attention! The following threat category was identified:

Threat Category	Description
	A potentially unwanted adware program designed to deliver various advertisements to the users' systems

File System Modifications

The following file was created in the system:

#	Filename(s)	File Size	File Hash	Alias
1	[file and pathname of the sample #1]	249,856 bytes	MD5: 0x87B7A421B118F1DB6163A5B9FCCD7105 SHA-1: 0x9F9D7BD1F89AC3FD87D49337A8873265A035374A	Adware.DigitalNames [PCTools] not-a-virus:AdWare.Win32.DigitalNames.l [Kaspersky Lab]

Memory Modifications

There was a new process created in the system:

Process Name	Process Filename	Main Module Size
[filename of the sample #1]	[file and pathname of the sample #1]	258,048 bytes

Registry Modifications

The following Registry Keys were created:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\C
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Cu
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Cus
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Cust
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Custo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Custom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customi
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customiz
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customize L
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customize Li
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customize Lin
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customize Link
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Customize Links
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\F
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Fr
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Fre
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free H
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free Ho
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free Hot
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free Hotm
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free Hotma
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free Hotmai
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Free Hotmail
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\G
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Gu
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Gui
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Guid
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Guide
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\H
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Ho
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Hot
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Hotm
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Hotma
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Hotmai
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Hotmail
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\L
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Li
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Lin
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Link
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Links
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\M
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Ma
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Mar
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Mark
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marke
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Market
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketpl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketpla
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketplac
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketplace
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Me
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Med
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Medi
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Media
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MS
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN.c
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN.co
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN.com
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\R
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Ra
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Rad
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radi
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio S
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio St
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Sta
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Stat
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Stati
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Statio
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Station
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Station
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Station G
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Station Gu
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\S
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\St
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Sta
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Stat
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Stati
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Statio
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station G
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station Gu
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station Gui
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station Guid
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station Guide
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\W
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Wi
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Win
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Wind

The newly created Registry Values are:

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Media]

Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Medi]

Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Med]

Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Me]

Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Marketpl]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Marketp]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Market]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Marke]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Mark]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Mar]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows Ma]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows M]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windows]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Window]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Windo]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Wind]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Win]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Wi]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\W]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station Guide]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station Guid]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station Gui]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station Gu]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station G]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Station]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB
Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Statio]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Stati]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Stat]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Sta]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\St]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\S]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Station Gu]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Station G]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Station]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB
Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Statio]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Stati]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Stat]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio Sta]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio St]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio S]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radio]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB
Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Radi]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Rad]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Ra]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\R]

Radio Station Guide^http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver=6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar&o1=&o2=&o3= = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN.com]

MSN.com^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=IStart = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN.co]

MSN.com^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=IStart = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN.c]

MSN.com^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=IStart = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN.]

MSN.com^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=IStart = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MSN]

MSN.com^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=IStart = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\MS]

MSN.com^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=IStart = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Media]

Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Medi]

Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Med]

Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Me]

Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketplace]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketplac]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketpla]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketpl]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marketp]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Market]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Marke]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Mark]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Mar]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Ma]

Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\M]

MSN.com^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=IStart = 0x005C03BB
Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Links]

Customize Links^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=CLinks = 0x005C03BB
[Links] Customize Links^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=CLinks = 0x005C03BB
[Links] Free Hotmail^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=hotmail = 0x005C03BB
[Links] Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
[Links] Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
[Links] Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NOVAGS\myhistory\Link]

Customize Links^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=CLinks = 0x005C03BB
[Links] Customize Links^http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=CLinks = 0x005C03BB
[Links] Free Hotmail^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=hotmail = 0x005C03BB
[Links] Windows Marketplace^http://go.microsoft.com/fwlink/?LinkId=30857&clcid=0x409 = 0x005C03BB
[Links] Windows Media^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windowsmedia = 0x005C03BB
[Links] Windows^http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=windows = 0x005C03BB

Other details

Analysis of the file resources indicate the following possible country of origin:

Republic of Korea

The data identified by the following URL was then requested from the remote web server:

http://222.239.74.153/novaversion_1226/novaini.ini

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.