Adware:W32/AdRotator.GEN

Classification

Spyware

Adware

W32

BannerRotator

Summary

Adware: A type of Advertising Display Software that delivers advertising content potentially in a manner or context that may be unexpected and unwanted by consumers.

Many adware applications also perform tracking functions, and therefore may also be categorized as Tracking Technologies.

Removal

Automatic action

Based on the settings of your F-Secure security product, it may block the file from running, move it to the quarantine where it cannot spread or cause harm, or ask you to select an action.

Find out more

Knowledge Base

Find the latest advice in our Community Knowledge Base.

User Guide

See the user guide for your product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details

Adware:W32/AdRotator.GEN detects multiple variants of AdRotator adware.

AdRotator, also known as BannerRotator, displays pop-up based advertisements at random intervals.

The adware is installed to the %system32% folder.

It has an auto-update ability, and it uses registry BHO and Run keys as launch points.

Example connection attempts:

  • https://rightonadz.biz/[...]/ip.php
  • https://rightonadz.biz/[...]/123kah.php
  • https://ads.bannerstyles15.info/[...]/123kah.php
  • https://ads.gooochi.biz/[...]/123kah.php
  • https://adssite.biz/[...]/install.php

Date Created: 2008-10-02 14:32:28.0

Date Last Modified: 2008-10-02 15:53:21.0