Wednesday, November 26, 2008

Adroar Adware

How To Remove Adroar?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Adroar is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.
It replaces your start page, continuosly open a number of pop up windows and so on.
Trojans-downloaders downloads and installs new malware or adware on the computer.



Adroar It also known as:

[Kaspersky]TrojanDownloader.Win32.Adroar;
[Eset]Win32/TrojanDownloader.Adroar.A trojan;
[Panda]Adware/Adroar

Adroar Symptoms:

Files:
[%WINDOWS%]\adroar.dll
[%WINDOWS%]\cpr.exe
[%WINDOWS%]\cpruninst.exe
[%SYSTEM%]\adroar.dll
[%SYSTEM%]\cpr.dll
[%WINDOWS%]\arupdate.exe
[%WINDOWS%]\system\adroar.dll
[%WINDOWS%]\system\cpr.dll
[%WINDOWS%]\adroar.dll
[%WINDOWS%]\cpr.exe
[%WINDOWS%]\cpruninst.exe
[%SYSTEM%]\adroar.dll
[%SYSTEM%]\cpr.dll
[%WINDOWS%]\arupdate.exe
[%WINDOWS%]\system\adroar.dll
[%WINDOWS%]\system\cpr.dll

Registry Keys:
HKEY_CLASSES_ROOT\adroar.band
HKEY_CLASSES_ROOT\adroar.band.1
HKEY_CLASSES_ROOT\clsid\{bdf6ce3d-f5c5-4462-9814-3c8eac330ca8}
HKEY_CLASSES_ROOT\clsid\{e0f0e0e1-5d45-11d4-bc00-2dcc73302d70}
HKEY_CLASSES_ROOT\clsid\{fac6e0e1-5d45-4907-bc00-302d702dcc73}
HKEY_CLASSES_ROOT\cpr.iehelperop
HKEY_CLASSES_ROOT\interface\{91d91d21-8008-429d-821c-7266aac84a9f}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{bdf6ce3d-f5c5-4462-9814-3c8eac330ca8}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{e0f0e0e1-5d45-11d4-bc00-2dcc73302d70}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{fac6e0e1-5d45-4907-bc00-302d702dcc73}
HKEY_CLASSES_ROOT\typelib\{ace8d3ba-7742-44c4-920d-fd25bd1e8245}
HKEY_CURRENT_USER\software\adroarplugin
HKEY_CURRENT_USER\software\cpr
HKEY_LOCAL_MACHINE\software\classes\clsid\{bdf6ce3d-f5c5-4462-9814-3c8eac330ca8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{bdf6ce3d-f5c5-4462-9814-3c8eac330ca8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{e0f0e0e1-5d45-11d4-bc00-2dcc73302d70}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{fac6e0e1-5d45-4907-bc00-302d702dcc73}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browserhelperobjects\{bdf6ce3d-f5c5-4462-9814-3c8eac330ca8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browserhelperobjects\{fac6e0e1-5d45-4907-bc00-302d702dcc73}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\cpr

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing IntermixMedia.KeenValue Adware

No comments: