AproposMedia.CxtPls
|
Description:
|
Spyware
|
|
Risk Level:
|
High
|
|
Date of First Occurence:
|
Monday, April 21, 2008
|
|
Software Developer:
|
PeopleOnPage, Inc.
|
|
Brief Info:
|
AproposMedia/CxtPls is an Internet Explorer Browser Helper Object, that monitors the browser activity and sends information.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
ELIMINAR SPYWARE »
Geographical Distribution of Threat "AproposMedia.CxtPls"
Threat Info
View All
Detected Items
- Detected Files:
%WINDIR%\atl.dll
MD5: 21FA2C08B7B1616BA1F6E4BD0D97700E Size:58880
MD5: A349434448624640BB36BC9B9A8B0056 Size:74810
MD5: 3C84A4F7075C534BBCAC60EAE2939C8B Size:58938
MD5: ED22A0A2E34469D195917E36C0079036 Size:58938
MD5: D16903B9431F799877AD6DF13D16BDA0 Size:58938
MD5: E19C554660654D923B2B6F5DAF2622FE Size:74802
MD5: 76E06BAE61A2920FFA4E9CB120542CBD Size:74802
MD5: 2D40EDB9BF811590DAD7406DEC67B926 Size:58880
MD5: 59E679104A09BC3F78326B5C25E7C3CC Size:74802
MD5: B740ABE8C7AC5E7597B6B049CAF532CA Size:73785
MD5: 73E73291091E4D456F4C5B3650EAF51B Size:74810
MD5: B41CFB7D20BC14D36267C5E3FC6FA96C Size:20992
and more....
%WINDIR%\PH.EXE
MD5: 12EAA839A133907BA06A72BE76BE68E5 Size:27136
MD5: EBC5427D415844C969C3E9D13B9B093E Size:12800
%WINDIR%\ace.dll
MD5: 3A7B361F587D01023EAA0605E7CB1D6F Size:630784
MD5: C7FC09F6C3650331619F553538E3A7C3 Size:45056
MD5: 419549BB6920B5FB13526030D1559A9D Size:565248
%WINDIR%\libexpat.dll
MD5: 60BE37692971C790593227450453D478 Size:114688
MD5: D8C79D7F02C1FA8B1FCB0B2E9FF09C9E Size:143360
%WINDIR%\ph.exe
MD5: 4FAB551B1AC0F6E03B9C35DF20A64EF9 Size:10752
%WINDIR%\atl.dll
MD5: 32BD4CC64449EA2549BE4A8EFC54F4DE Size:58880
MD5: FB83B716B5B1045134D993E962AAE053 Size:69632
MD5: D130A538E2DA73D7300024FE9AA636EB Size:58880
%WINDIR%\atla.dll
MD5: 0E5EA3F33938AA6BE4A4146EEDDC00FA Size:73785
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%WinDir%\install_ct.exe
%WinDir%\auto_update_loader.exe
%WinDir%\CXtPls.exe
%WinDir%\ProxyStub.dll
%WinDir%\WinGenerics.dll
%WinDir%\ace.dll
%WinDir%\atla.dll
%WinDir%\atlw.dll
%WinDir%\data.bin
%WinDir%\libexpat.dll
%WinDir%\ph.exe
%WinDir%\atl.dll
%Sysdir%\atmon.exe
%Sysdir%\intfaxui.exe
- Files by CLSID or Name
CLSID=016235BE-59D4-4CEB-ADD5-E2378282A1D9
CLSID=B5AB638F-D76C-415B-A8F2-F3CEAC502212
CLSID=B99A727F-0782-4A71-BCC2-6E1E66414904
CLSID=B548B7D8-3D03-4AED-A6A1-4251FAD00C10
CLSID=5EB250D7-2F0D-2C7A-0DC0-8A508FE8F3C
CLSID=5967BAE1-2AB3-00FC-21E8-57362EAE900
- Registry Keys
HKLM\SOFTWARE\AutoLoader
HKLM\SOFTWARE\Envolo\AutoUpdate\State\AM_version = 1.0.138
HKLM\SOFTWARE\Apropos
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AproposClient
«
Go to Software Database
