1. /
  2. Security Response/
  3. Adware.DisableKey

Adware.DisableKey

Updated:
May 23, 2007 4:03:43 PM
Type:
Adware
Risk Impact:
Medium
Systems Affected:
Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows Server 2003, Windows 2000
When the program executes, it creates the following files:
  • %System%\hjvyqd.dll
  • %System%\wtzlank.dll


Next, it creates the following registry entry so that it executes whenever Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"wtzlank.dll" = "%System%\rundll32.exe %System%\wtzlank.dll,qttwuwc"

It also creates the following registry subkeys:
HKEY_ALL_USERS\Software\AdwareDisableKey3
HKEY_LOCAL_MACHINE\SOFTWARE\AdwareDisableKey3
HKEY_CLASSES_ROOT\CLSID\{4C73246C-B917-D8FD-CF5B-025CDD411BE8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4C73246C-B917-D8FD-CF5B-025CDD411BE8}

The program then periodically displays advertisements on the computer.
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver