Adware.Emusic

Adware.Emusic

Updated:
13 April 2006
Risk Impact:
Medium
Systems Affected:
Windows

Behavior


Adware.Emusic is adware that creates links on the user's desktop and in Internet Explorer's main window. It may be installed without user consent.

Antivirus Protection Dates

  • Initial Rapid Release version 02 October 2014 revision 022
  • Latest Rapid Release version 25 November 2016 revision 024
  • Initial Daily Certified version 13 April 2006
  • Latest Daily Certified version 26 November 2016 revision 001
  • Initial Weekly Certified release date 19 April 2006
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Adware.Emusic is adware that creates links on the user's desktop and in Internet Explorer's main window. It may be installed without user consent.

When first installed, Adware.Emusic creates the following files:
%UserProfile%\Desktop\50 FREE MP3s from eMusic!.url
%UserProfile%\Start Menu\Programs\50 FREE MP3s from eMusic!.url
%ProgramFiles%\eMusic\eMusicClient.ini
%ProgramFiles%\eMusic\eMusicSetup.exe
%ProgramFiles%\eMusic\Round.ico
%Windir%\eMusicClient.ini
%Windir%\eMusicSetup.exe

The risk then creates the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{686C970F-1D7D-4469-85D1-4B35763B56CC}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{686C970F-1D7D-4469-85D1-4B35763B56CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eMusicSetup

The risk creates the following registry entry:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\"{686C970F-1D7D-4469-85D1-4B35763B56CC}" = "0x00002002"

The risk creates the following legitimate registry entry:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\"{1E796980-9CC5-11D1-A83F-00C04FC99D61}"