Adware.Movittone

Behavior
Adware.Movittone is an adware program that downloads porn movie and asks the user to pay a fee for the service.

Symptoms
The files are detected as Adware.Movittone.

Transmission
Most likely downloaded from a site that includes adware.

technical details

When Adware.Movittone is installed, it performs the following actions:

1. Attempts to post user name to [http://]www.movitto1.com/[Removed]/seikyuu.php.

2. Opens [http://]www.movitto1.com/[Removed]/seikyuu.php and asks the user to pay fee for a service.

3. Creates the file [Japanese characters].txt on the desktop. The file also asks the user to pay fee for a service.

4. Downloads a Real Player Media file from [http://]www.movitto1.com/Removed]/movie/.

REMOVAL INSTRUCTIONS
See: http://securityresponse.symantec.com/avcenter/security_risks/adware/

After the files are deleted, restart the computer in Normal mode and proceed with the next section.

Warning messages may be displayed when the computer is restarted, since the risk may not be fully removed at this point. You can ignore these messages and click OK. These messages will not appear when the computer is restarted after the removal instructions have been fully completed. The messages displayed may be similar to the following:

Title: [File path]
Message body: Windows cannot find [file name]. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.