Elodu
|
Description:
|
Adware
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Monday, April 21, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Adware
Software that is displaying pop-up/pop-under windows containing advertisements when the primary user interface is not visible or displayed advertisements are not related to the product.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SUPPRIMER SPYWARE »
Geographical Distribution of Threat "Elodu"
Threat Info
View All
Detected Items
- Detected Files:
%SYSDIR%\lsmgr.dll
MD5: FDD71BBD29CD5AA1014872BEE2DDAD45 Size:245760
MD5: 5DE3C84EAC48C365E1A9B7EF4CE9813B Size:155648
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%sysdir%\IESysIcon.ico
%sysdir%\lsmgr.dll
%systemdiskroot%\diskcheck.exe
- Files by CLSID or Name
CLSID=EC564D32-0F1A-4367-8A9B-4A9F57688D03
- Registry Keys
HKLM\SOFTWARE\Classes\Interface\{1CFFD533-46FE-4031-A3FF-5370943BA025}
HKLM\SOFTWARE\Classes\TypeLib\{3E704673-BE49-4C13-8E36-288326D14709}
HKLM\SOFTWARE\Classes\lsmgr.mssgr
HKLM\SOFTWARE\Classes\lsmgr.mssgr.1
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D1EDDE84-E67E-4ccd-B28E-73AD3B71A7C9}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EC564D32-0F1A-4367-8A9B-4A9F57688D03}
«
Go to Software Database