 |
Home
Articles
Spyware Research
Support
Scan Now
Purchase
F.A.Q.
Top 25 Spyware:
Glossary Latest Detections  |
 |
Adware/TrojanDownloader.Win32Alias: Spyware/Cydoor, Cydoor, TrojanDownloader.Win32.BHO
Description: Cydoor is an adware that downloads advertisements from a server and displays them on your computer. Cydoor ships with P2P programs such as iMesh, Kazaa, Limewire, Grokster, etc. Its called - 'hosting Adware'. Cydoor stores the ads in AdCache or Roodyc. Threat type: Adware - Adware is a software application which displays advertisements on your computer. Advertisements can be displayed through pop-up / pop-under windows, additional bars or toolbars, underlined links or buttons that appear on a computer screen. Adware applications include additional code that delivers the ads. Adware authors earn money when users click on those ads. Occasionally, adware includes code that tracks user's site visits and passes it to third parties without the user's permission or knowledge. Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy. Detection: SpyNoMore detects Adware/TrojanDownloader.Win32: Yes Threat risk: High Risk  Very dangerous malware. Can log user's keyboard activity and take snapshots of the user's screen. Uses stealth installation and removal is very difficult. Category includes spyware programs, adware programs and trojans. Symptoms:
Running Process Signatures: N/A File Signatures: c:\bellsouth\client foundation\profilemanager.dll %WINDOWS%\system32\cd_load.exe c:\bellsouth\client foundation\ibjclientupdatepresentation.ini c:\bellsouth\client foundation\connectivitywatcher.dll c:\bellsouth\client foundation\rmvbjcfd.dll %WINDOWS%\temp\cd_clint.dll c:\bellsouth\client foundation\bjcomthirdpartymanager.ini c:\bellsouth\client foundation\ibjconnectivitywatcher.ini c:\bellsouth\client foundation\ibjappproperties2.ini c:\bellsouth\client foundation\bjcomfiletransfer.dll %WINDOWS%\system32\msg{6ea0f469-dfd6-40fa-8ec0-29c8bf23cf76}0108.dll c:\bellsouth\client foundation\ibjagentregistration.ini %WINDOWS%\system\cd_load.exe c:\bellsouth\client foundation\clientupdatepres.dll c:\bellsouth\client foundation\bjcombase.dll c:\bellsouth\client foundation\appproperties.dll c:\bellsouth\client foundation\bjcomvtblade.dll c:\bellsouth\client foundation\bjcomsrcmanager.dll c:\bellsouth\client foundation\ibjfiletransfer.ini c:\bellsouth\client foundation\bjcomvtblade_ibjvtblade.ini c:\bellsouth\client foundation\ibjprofilemanager.ini c:\bellsouth\client foundation\ssleay32_1-1-0_ddr.dll c:\bellsouth\client foundation\cfd.exe %WINDOWS%\system32\cd_htm.dll c:\bellsouth\client foundation\ibjdiscoveryservice.ini c:\bellsouth\client foundation\basicloaderservice.dll %WINDOWS%\system\cd_clint.dll c:\bellsouth\client foundation\directoryservice.dll %PROFILE%\local settings\temp\cd_clint.dll %WINDOWS%\temporary internet files\content.ie5\kgrv9a5f\cd_htm[1].dll %WINDOWS%\system\cd_html.dll c:\bellsouth\client foundation\ibjspmmanager.ini %WINDOWS%\system\cd_swf.dll c:\bellsouth\client foundation\bjcomrt.dll c:\bellsouth\client foundation\ibjtimermanager.ini c:\bellsouth\client foundation\libeay32_1-1-0_ddr.dll %WINDOWS%\cdmxtras\uninst.exe c:\bellsouth\client foundation\bjintlcore_1_1_ddr.dll c:\bellsouth\client foundation\ibjsrcmanager.ini c:\temp2\cd_install.exe %WINDOWS%\system\cd_htm.dll c:\bellsouth\client foundation\bjagentregistration.dll c:\bellsouth\client foundation\ibjprofileenum.ini c:\bellsouth\client foundation\bjcomannouncement.dll c:\bellsouth\client foundation\thirdpartymanager.dll c:\bellsouth\client foundation\clientfilterengine.dll c:\bellsouth\client foundation\bjcomannouncement.ini c:\bellsouth\client foundation\basicdiscoveryservice.dll c:\bellsouth\client foundation\bjcombase_ibjbasicstream.ini c:\bellsouth\client foundation\timermanager.dll c:\bellsouth\client foundation\ibjfoundationregistration.ini c:\bellsouth\client foundation\stlport_4_0_0_ddr.dll c:\bellsouth\client foundation\bjcomclientfilterengine.ini %WINDOWS%\system32\cd_swf.dll c:\bellsouth\client foundation\bjcomspmmanager.dll c:\bellsouth\client foundation\bjfreg.dll c:\bellsouth\client foundation\bjcombase_ibjstringlist.ini c:\bellsouth\client foundation\clientupdate.ini c:\bellsouth\client foundation\bjcombase_ibjfilespec.ini c:\bellsouth\client foundation\bjcombase_ibjstring.ini %WINDOWS%\system32\gdnp.dll c:\bellsouth\client foundation\xerces-c_1_40_0_ddr.dll c:\bellsouth\client foundation\clientupdate.dll %WINDOWS%\system\cd_gif.dll Registered Dll (Dynamic Link Library) Signatures: N/A Folder Signatures: %WINDOWS%\system\adcache %WINDOWS%\system32\adcache %PROGRAM_FILES%\eudora\qualcomm2\eudora\eudpriv\ads\adcache %PROGRAM_FILES%\qualcomm\eudora\eudpriv\ads\adcache %WINDOWS%\system32\roodyc Registry Signatures: HKCU\software\cydoor services HKLM\software\microsoft\windows\currentversion\uninstall\adsupport_277 HKCU\software\cydoor HKLM\software\microsoft\windows\currentversion\uninstall\adsupport_319 HKLM\software\microsoft\windows\currentversion\uninstall\adsupport_202 HKLM\software\microsoft\windows\currentversion\uninstall\adsupport_253 HKLM\software\microsoft\windows\currentversion\uninstall\adsupport_314 HKU\.default\software\cydoor services HKU\.default\software\cydoor HKLM\software\cydoor HKLM\software\microsoft\windows\currentversion\uninstall\adsupport_270 HKLM\software\microsoft\windows\currentversion\uninstall\adsupport_336 HKLM\software\microsoft\windows\currentversion\uninstall\adsupport_371 SpyNoMore Collected Residual File Signatures: N/A
| | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||
|
||||
 |
|
 | ||