NewADS
|
Description:
|
Adware
|
|
Risk Level:
|
High
|
|
Date of First Occurence:
|
Thursday, May 22, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
NewADS - Software that is displaying pop-up/pop-under windows containing advertisements when the primary user interface is not visible or displayed advertisements are not related to the product.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SUPPRIMER SPYWARE »
Geographical Distribution of Threat "NewADS"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\PSupport\pupdate.exe
MD5: 231AE5CED7B8E2369438DA71BD974789 Size:208708
%PROGRAMFILES%\PSupport\psupport.exe
MD5: FB17D90797336433F78B2B66C640FCDF Size:278528
%PROGRAMFILES%\PSupport\plibrary.dll
MD5: A11CF52DE99D1F65C1DAC65B89D0D596 Size:23552
%PROGRAMFILES%\AdSponsor\AdSponsor.dll
MD5: 7D572B1EA2DAC8C2FEB9B2C46264D96A Size:184320
%PROGRAMFILES%\AdSponsor\Uninstall.exe
MD5: EA318AB3ABAACBDCB7565595BF13400E Size:33011
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%programfiles%\Exolon\Exolon.dll
%programfiles%\Exolon\Exolon.exe
%programfiles%\Exolon\Uninstall.exe
%programfiles%\AdSponsor\AdSponsor.dll
%programfiles%\AdSponsor\Uninstall.exe
%programfiles%\PSupport\desktop.ini
%programfiles%\PSupport\pengine.sys
%programfiles%\PSupport\plibrary.dll
%programfiles%\PSupport\psupport.exe
- Files by Directories
%programfiles%\Exolon
%programfiles%\AdSponsor
%programfiles%\PSupport
- Files by CLSID or Name
CLSID=2BC9C452-BB57-4896-A9A2-64611E06C5AA
CLSID=6CA1C00B-90FC-4F3E-911F-95306ABA43AA
CLSID=994D478A-45D0-4DB4-AE28-738B1E346F99
CLSID=04DCB17C-AB45-83AD-A86A-6DFB90277939
- Registry Keys
HKLM\software\Classes\AppID\AdBand.DLL
HKLM\software\AdBand.BandBHO
HKLM\software\AdBand.BandBHO.1
HKLM\software\AdBand.BandImpl
HKLM\software\AdBand.BandImpl.1
HKCU\Software\AdSponsor
HKCU\Software\PadsysAssistant
HKCU\Software\PSupport
«
Go to Software Database
