1. /
  2. Security Response/
  3. Adware.Atlcontrol

Adware.Atlcontrol

Updated:
February 13, 2007 11:47:05 AM
Type:
Adware
Risk Impact:
High
File Names:
atlcontrole.exe,atlcontrol.dll
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.Atlcontrol is installed, it performs the following actions:
  1. Creates the following files:
    • atlcontrole.exe
    • atlcontrol.dll

  2. Downloads a configuration file from the hitkorea.co.kr site. This file contains configuration information for the adware including changing the start page and which specific adserver to use.

  3. Creates the registry key

    HKEY_CURRENT_USER\Software\atlcontrol

    where it stores configuration information about the current install.

  4. May add the value:

    "atlcontrol" = "[PATH TO ADWARE]\atlcontrole.exe"

    to the registry subkeys

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

    so that the risk runs every time Windows starts.

  5. May redirect search requests and change the Internet Explorer start page depending on the response received in Step 2 above.


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver