PerMedia is an advertising system managed by Permissioned Media, consisting of an IE Browser Helper Object and a process set to run on Windows startup, which updates the software.

Also known as

FriendGreetings , after a site providing it. WinSrv Reg after the program name.

Variants

FriendGreetings/A : spread through mail pointing at www.friendgreetings.com. FriendGreetings/B : mail points at www.friend-greeting.com. FriendGreetings/C : mail points at www.laugh-mail.com. FriendGreetings/D : mail points at pv1.us-downloads.com. All variants have different ActiveX class IDs, and slightly different mail text.

Distribution

Was installed by ActiveX drive-by-download in e-cards sent through friendgreetings.com. These e-cards were spread in a viral manner: on receipt of a card and agreement to install, further invitations would be sent to all entries in a user's address book.

Note that despite an MSNBC article confusing the two, this is is not the same software as Cytron , another parasite disguised as an 'e-card', which is spread through spam, not e-mail worms.

Advertising

Yes. Opens pop-ups during web browsing.

Privacy violation

Yes. Monitors web sites visited and passes this information to Permissioned Media with a unique ID tied to the name and e-mail address used where the software was received.

Security issues

Yes. Can download and install arbitrary code both as an update feature and to load third-party software.

Stability problems

None known.

Removal

Using the Control Panel's Add/Remove Programs feature, remove the 'WinSrv Reg' entry. You can also remove 'Friend Greetings' if you have it, though the entry doesn't do much.