Adware.Adstation

Updated: February 13, 2007 11:44:29 AM

Type: Adware

Risk Impact: Low

File Names: adstation.exe adshook.dll

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.Adstation runs, it performs the following actions:

Downloads configuration files and updates to itself from the www.2pari.co.kr domain.
Creates the folder %System%\adstation

Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Creates the following files in the %System%\adstation folder:
- logo.bmp
- go.bmp
- icon.bmp
- menu.dat
- adshook.dll
Loads the file adshook.dll, which may monitor Web sites visited.
Creates the registry subkey:HKEY_LOCAL_MACHINE\SOFTWARE\ADNCommunication\AdStation
Downloads and displays adware on the compromised computer.

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}