|
|
Windows SyncroAd Adware Information
| Name: |
Windows SyncroAd |
| Category: |
Adware |
| Alias: |
- Alias: RSync |
| Advice: |
Remove |
| Risk: |
High Risk
High risk threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction. May open up communication ports, use polymorphic tactics, stealth installations, and/or anti-spy counter measures. May use a security flaw in the operating system to gain access to your computer. |
| Description:
|
Windows SyncroAd downloads files from the Internet and then saves them to the users computer.
The following are the URLs where the Trojan downloads files from:
http://vsbi.biz/counts/allnt.php
http://veiz.biz/counts/ncount.php
http://67.19.51.10/enter/aes.asp?user=stealth
http://www.vesbiz.biz/d/1346.exe
http://virgin-tgp.net/wioon.exe
http://selearch.biz/2.exe
Windows SyncroAd downloads the following files and saves them in the Windows system folder:
com.exe
host32.exe
ide21201.vxd
mouse.exe
mwvlfqxx.exe
printer.exe
printer32.exe
The file HOST32.EXE downloads and executes the files from the said URLs.
|
| Signatures:
|
process: syncroad.exe: MD5 Hash: f5f12dddbe449c44b09...
process: winsync.exe: MD5 Hash: 54ba772f2d3c22a07a6...
process: syncroad.exe: MD5 Hash: c6d9537309dd8b82424...
process: SAE272.TMP.EXE: MD5 Hash: 007d7c9debd4fb9ccc2...
process: syncroad.exe: MD5 Hash: 62be3e9c67b13253bf9...
process: winsync.exe: MD5 Hash: 6d687d69c3811a8849c...
process: SAE272.TMP.EXE: MD5 Hash: 007d7c9debd4fb9ccc2.. |
| Type: |
Adware - A Trojan software is any software on a user's computer that the user is not aware or intentionally installed. Most Trojan software is designed to perform some sort of actions that could jeopardize the user's security or privacy. |
Top Adware Visited Pages:
Adw.WinSoftware.WinAntiSpyware - 536 visits
ClickSpring.PuritySCAN.Downloader - 395 visits
DMCast - Alias: Desktop Media Cast - 167 visits
RBot.schvost - Alias: WORM_RBOT.CAU - 101 visits
WhenU.SaveNow - Alias: SAVE!, SaveNow, WhenU.SaveNow, WhenUSaveNow - 77 visits
Adw.FreePcScan.SpywareSlayer - 65 visits
Seekmo Search Assistant - 63 visits
ABetterInternet.Transponder.Ceres - Alias: Ceres - 63 visits
HelpExpress - Alias: Adware.HelpExpress - 59 visits
TopRebates.RebateNation - Alias: Adware:WebRebates.D - 54 visits
Random Adware Pages:
ABetterInternet.Poller
Aureate Group Mail
SpyBlast
Adw.WinSoftware.WinAntiSpyware
SearchSeekFind
IST.PowerScan
ShopForGood IE Plugin - Alias: TGDC IE Plugin, TGDC, ShopForGood
WinProtectTask - Alias: WinProtect
NLite
PrizeSurfer - Alias: RSync
|
|
