Downloader/Active Delivery

Alias: Active Delivery

Description: From the publisher: 'Active Key Logger - this is the best choice, if you want to know what others are doing on your own computer while you are not at home (or office). Establish in parameters ' Start in hide mode ' and the program will be loaded To not be shown in tray, that the program of a dancing party is visible in tray use ' shortcut key for unhide mode '. You want to know that the people do on your computer, then Active Key Logger for you. Features Support Windows XP themes Start in hide mode Shortcut key for unhide mode Shortcut key for view log Run program with start windows Fast and easy installation program Easy to uninstall'

Threat type:

Downloader - A Downloader is a software application or part of the program which is designed to retrieve (download) and install additional files from the Internet. Malware programs often include Downloaders which allow the Malware to continually update themselves, thereby eluding detection.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects Downloader/Active Delivery: Yes

Threat risk: High Risk

Very dangerous malware. Can log user's keyboard activity and take snapshots of the user's screen. Uses stealth installation and removal is very difficult. Category includes spyware programs, adware programs and trojans.

Symptoms:

Downloader/Active Delivery Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with Downloader/Active Delivery, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
%WINDOWS%\system32\clrschp033.exe
%WINDOWS%\digital signature 20031013.htm
%DESKTOPDIRECTORY%\old port casino.url

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
N/A

Registry Signatures:
HKLM\software\classes\clsid\{a1558b18-f76c-40fe-b358-9e47449f3cfe}
HKLM\software\classes\clsid\{a4a58a2c-b039-432b-8bc1-dca7ac0757dc}

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
Trojan/probably-3
Trojan/BootEXE.451.a-1
Trojan/Dropper/Boys
Exploit/Henky.Adonai.A.Callgate
Trojan/H99Clean
Hacker Tool/KME
Dialer/EZ 1-2-3
Hacker Tool/RRRACC 1.03
Trojan/Batalia6
Trojan/BAT.Lame.874