F-Secure
Tools
Adware:W32/TrafficSol
| Name : | Adware:W32/TrafficSol |
| Detection Names : |
AdWare.Win32.TrafficSol |
| Category: | Spyware |
| Type: | Adware |
| Platform: | W32 |
Summary
This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.
Details
Network Connections
Attempts to connect with HTTP to:
• http://trafficsolution.com/bc/adrotator.php
• http://rightonadz.biz/bc/123kah.php
• http://superiorads.biz/bc/123kah.php
• http://superiorads.biz/bc/ip.php
• http://cpmsky.biz/bc/123kah.php
• http://cpmsky.biz/bc/ip.php
• http://ads.targetedbanner.biz/bc/ip.php
• http://ads.targetedbanner.biz/bc/123kah.php
Additional Details
The TrafficSol family of adware programs display advertisements that may be unexpected and unwanted by users.
Some variants are silently installed and are hard to remove.
Installation
This family of adware drops files in the %System% folder.
Registry
During installation, the adware adds the following registry key :
Where [ABC] is a DLL file in the %System% folder.
It also adds a registry entry under Browser Helper Objects (BHO) here :
Where [CLSID] stands for a long CLSID number.
Note
This adware is related to the AdRotator adware.
Some variants are silently installed and are hard to remove.
Installation
This family of adware drops files in the %System% folder.
Registry
During installation, the adware adds the following registry key :
• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run = %system%\[ABC]
Where [ABC] is a DLL file in the %System% folder.
It also adds a registry entry under Browser Helper Objects (BHO) here :
• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ [CLSID]
Where [CLSID] stands for a long CLSID number.
Note
This adware is related to the AdRotator adware.