Adware.SyncroAd

Updated: February 13, 2007 11:39:49 AM

Type: Adware

Version: N/A

Publisher: N/A

Risk Impact: Medium

File Names: SyncroAd.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.SyncroAd is run, it does the following:

May creates the following files:
- %System%\ide21201.vxd
- %ProgramFiles%\Windows ControlAd\info.txt
- %ProgramFiles%\Windows ControlAd\WinCtlAd.exe
- %ProgramFiles%\Windows ControlAd\WinCtlAdAlt.exe
- %ProgramFiles%\Windows ControlAd\WinCtlAdShift.exe
  
  Notes:
- %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
- %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
May add the values:

"Windows SyncroAd" = "[PATH TO SyncroAd.exe]""Windows ControlAd" = "[PATH TO WinCtlAd.exe]"to the registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runso that the risk runs every time Windows starts.
May add the following registry subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows SyncroAd HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows ControlAd HKEY_LOCAL_MACHINE\SOFTWARE\Windows ControlAd

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}