Threat Explorer

The Threat Explorer is a comprehensive resource consumers can turn to for daily, accurate, up-to-date information on the latest threats, risks and vulnerabilities.

Adware.Emusic

Adware.Emusic

Updated:
13 April 2006
Risk Impact:
Medium
Systems Affected:
Windows

Behavior


Adware.Emusic is adware that creates links on the user's desktop and in Internet Explorer's main window. It may be installed without user consent.

Antivirus Protection Dates

  • Initial Rapid Release version 02 October 2014 revision 022
  • Latest Rapid Release version 07 May 2019 revision 006
  • Initial Daily Certified version 13 April 2006
  • Latest Daily Certified version 07 May 2019 revision 008
  • Initial Weekly Certified release date 19 April 2006
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Adware.Emusic is adware that creates links on the user's desktop and in Internet Explorer's main window. It may be installed without user consent.

When first installed, Adware.Emusic creates the following files:
%UserProfile%\Desktop\50 FREE MP3s from eMusic!.url
%UserProfile%\Start Menu\Programs\50 FREE MP3s from eMusic!.url
%ProgramFiles%\eMusic\eMusicClient.ini
%ProgramFiles%\eMusic\eMusicSetup.exe
%ProgramFiles%\eMusic\Round.ico
%Windir%\eMusicClient.ini
%Windir%\eMusicSetup.exe

The risk then creates the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{686C970F-1D7D-4469-85D1-4B35763B56CC}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{686C970F-1D7D-4469-85D1-4B35763B56CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eMusicSetup

The risk creates the following registry entry:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\"{686C970F-1D7D-4469-85D1-4B35763B56CC}" = "0x00002002"

The risk creates the following legitimate registry entry:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\"{1E796980-9CC5-11D1-A83F-00C04FC99D61}"