Additional Details
Adware:W32/AdRotator.GEN detects multiple variants of AdRotator adware.
AdRotator, also known as BannerRotator, displays pop-up based advertisements at random intervals.
The adware is installed to the %system32% folder.
It has an auto-update ability, and it uses registry BHO and Run keys as launch points.
Example connection attempts:
• http://rightonadz.biz/[...]/ip.php
• http://rightonadz.biz/[...]/123kah.php
• http://ads.bannerstyles15.info/[...]/123kah.php
• http://ads.gooochi.biz/[...]/123kah.php
• http://adssite.biz/[...]/install.php