Max Secure Software: Encyclopedia

Home / Spyware Encyclopedia / Clicker.Adpower << Back

Recommendation to Automatically remove Clicker.Adpower

Our products can remove Clicker.Adpower and thousands of other Virus and Spyware automatically and instantly.

Clicker.Adpower Details

Category Clicker
Discovered 3/28/2007 3:35:00 PM
Modified 8/11/2023 3:35:38 PM
Threat Level Medium
Category Description
This family of Trojans redirects victim machines to specified websites or other Internet resources. Clickers either send the necessary commands to the browser or replace system files where standard Internet urls are stored. Clickers are used: 1. To raise the hit-count of a specific site for advertising purposes. 2. To organize a DoS attack on a specified server or site. 3. To lead the victim to an infected resource where the machine will be attacked by other malware (viruses or Trojans).

The following Files were created:

VALUE	FILESIZE	SIGNATURE
ieupdate.dat	27	eb0f4c3987c3ee10062d531297181ad0
Trojan-Spy.Win32.Banker.akc.exe	706048	da747ff65e8f50337be6f7a8917c90a6
kernels32.exe	9358	d01ad1f00e2a4fef485d6c293a890f07
Trojan-Spy.Win32.Banker.ajq.exe	574464	c40882e30af4a36bd45d3ead6bb4c955
TROJAN-SPY.WIN32.BANKER.AN.EXE	4680	3ad989a1bff3b5fffe3f5f37d7a91b46
TROJAN-SPY.WIN32.BANKER.AMM.EXE	179744	31ba32d13dd5aba524b73f4db2955088
system.bat	58	250d262123c35badae35c47ac7d9bc18
TROJAN-SPY.WIN32.BANKER.AL.EXE	5008	1bceddd2252d882d6378ede00c20c8df
wmedia32.exe	44701	1b7180cddc05af7594463f61739be242
wmedia32.exe	50280	13bbd60a8ac32ef4cb68969966c8c429

The following Registry Entries were created:

..\Software\Microsoft\Windows\CurrentVersion\Run\ \"EXPLORER"\"%WIN.SYS32%\EXPLORER.EXE"

..\Software\Microsoft\Windows NT\CurrentVersion\Run\"Service System"\""%WIN%\kernels32.exe""

..\Software\Microsoft\Windows\CurrentVersion\Run\\"hen"\"%WIN%\TROJAN-SPY.WIN32.BANKER.AN.EXE"

..\Software\Microsoft\Windows\CurrentVersion\Run\\"svchosts.scr"\"%WIN%\svchosts.scr"

..\Software\Microsoft\Windows\CurrentVersion\Run\\"TROJAN-SPY.WIN32.BANKER.ALL"\"%DAS.AU.LS%\Temp\TROJAN-SPY.WIN32.BANKER.ALL.EXE"

..\Software\Microsoft\Windows\CurrentVersion\Run\\"Service System"\""%WIN%\kernels32.exe""

..\Software\Microsoft\Windows\CurrentVersion\Run\\"WMEDIA32"\"WMEDIA32.EXE"

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Recommendation to Automatically remove Clicker.Adpower

Clicker.Adpower Details

Useful Links