Threat Information for "AdRotator Icons"

Removal Top

StopSign will automatically remove this infection with a paid membership.

Summary Top
  • Name: AdRotator Icons
  • Aliases:Win32:Adware-gen., Adware.Bho.AO, Adware.Iconclick, Adware/BHO!011, AdWare.Win32.BHO.ao, Adware-IconAds
  • Date Discovered: 2006-08-30
  • Protection Added: 2006-08-31
Description Top 
-- Ease of Removal

1: Uses running processes
2: Consistent file contents
3: Consistently named
4: Creates new registry entries with consistent data
5: Runs as a BHO or shell extension

-- Damage/Intrusion/Annoyance

1: Displays targeted popup advertisements

-- Propagation/Saturation

1: Installed by other infections
Technical Details Top
  • Added Directory/File:
    FilePath: %CACHE%\Stp*.exe
  • Added Directory/File:
    FilePath: %TEMPDIR%\nodeipprocStp.exe
  • Added Directory/File:
    FilePath: %SYSTEMDIR%\nodeipproc.dll
  • Added Directory/File:
    FilePath: %SYSTEMDIR%\icondrop.db
  • Added Directory/File:
    FilePath: %SYSTEMDIR%\uninstIcn.exe
  • Added Registry Key:
    Key: HKLM\SOFTWARE\Classes\OddBot.AdClicker
  • Added Registry Key:
    Key: HKLM\%CURRENTVERSIONREG%\Uninstall\Icons
  • Added Registry Key:
    Key: HKLM\%BHOREG%\{2B896072-F6E3-4FF7-ADE6-43D5BEC6557C}
  • Added Registry Key:
    Key: HKLM\SOFTWARE\Classes\Interface\{251DF512-6FAF-4AAF-BF19-D99B5F1C9250}
  • Added Registry Key:
    Key: HKLM\SOFTWARE\Classes\OddBot.AdClicker.1
  • Added Registry Key:
    Key: HKLM\SOFTWARE\NodeIpProc
  • Added Registry Key:
    Key: HKLM\%CURRENTVERSIONREG%\Uninstall\AdRotator
  • Added Registry Key:
    Key: HKLM\SOFTWARE\Classes\TypeLib\{C845AC9A-70A6-491C-9106-D34A360E1F58}
  • Added Registry Key:
    Key: HKLM\SOFTWARE\Classes\CLSID\{2B896072-F6E3-4FF7-ADE6-43D5BEC6557C}