1. /
  2. Security Response/
  3. Adware.GatorClone

Adware.GatorClone

Updated:
February 13, 2007 11:38:07 AM
Type:
Adware
Risk Impact:
High
File Names:
Sysupd.exe killhook.dll mp3ad.exe
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Adware.GatorClone performs the following actions when executed:
  1. Creates a randomly named .dll file in the %Temp% folder and injects the file into running processes. This .dll file will restart the adware program if the adware program is terminated.

  2. Adds the value:

    <Filename of Adware> = <Path to Adware>

    to the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

  3. Contacts a remote server for advertisements and instructions, and displays pop-up ads.


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report