This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.
Once detected, the F-Secure security product will automatically quarantine the suspect file and prompt the user to select a further desired action.
Quarantine is a safe repository for files that may be harmful. A quarantined file can be restored or, if you decide so, deleted.
This is the family description for the Adware:W32/Stud family of adware.
Like most adware programs, it displays pop-up advertisements. Members of the Stud adware family also gather data on the web searches made by the user.
During installation, the user is prompted to read and agree to an end user license agreement (EULA) before proceeding with the installation:
Should the user agree and click on "Next", the adware installs a DLL into the %system32% folder, then registers it as a Browser Helper Object (BHO). This means that each time the Microsoft Internet Explorer browser is started, the adware program is also automatically launched.
In addition to displaying pop-up advertisements, Stud adware programs are able to auto-update. To do so, the program must connect with a remote system to download the necessary components/updates. An example of a possible connection is:
Description Created: 2009-03-16 04:52:08.0
Description Last Modified: 2009-04-22 06:16:33.0