Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus downloadAnti Spyware Software
Spyware Detector - HomeSpyware Detector - PurchaseSpyware Detector - AffiliatesSpyware Detector - Download UpdatesSpyware Detector -FAQSpyware Detector -Contact Us

Home/ Spyware Encyclopedia / Clicker.Agent

 Clicker.Agent Technical Details
 CategoryClicker
 Discovered 2/28/2008 09:43:00 AM
 Modified 7/9/2008 11:41:00 AM
 Threat LevelCritical
 DescriptionThis family of Trojans redirects victim machines to specified websites or other Internet resources. Clickers either send the necessary commands to the browser or replace system files where standard Internet urls are stored.Clickers are used:1. To raise the hit-count of a specific site for advertising purposes 2. To organize a DoS attack on a specified server or site 3. To lead the victim to an infected resource where the machine will be attacked by other malware (viruses or Trojans).
 SummaryThe hosts file was updated with the following url-to-ip mappings: n/a
The following http urls were started: n/a
Generated smtp traffic: n/a
Connection(s) established with remote IRC Server: n/a
The following hidden entries created: n/a
The following internet connection was established: n/a
 When the Clicker is executed, it creates the following files:
 
NameVersionPublisherSignature (MD5)File Size (in Bytes)
..\puzqzgvy.dll  6ccf02e99054d2c66a7752721ed69b8067072
..\hbhabcmu.exe  02783e0d56faa10d253aef2a1c7d3cc9118784
..\pornotop\ptop.exe  3b7c427367db2eb29b461e77f02e5767233984
..\3863540.dll1.0.0.1 25aad8a2ea56388fb1c5d88e63d13f0a122880
..\a6e0d389.exe  84f6267af035d636b49f7b740d203d506893
..\ad69ceaf.exe  156973597d98835236c84200d0d2b672437562
..\f2a16c9b.dll2.0.0.5 ef9ab2023977e956d28040b05d00703c365568
..\a8238340.exe  e4cabb974297cc00cdecb28b327b639f222208
..\temp\orz.exe  a2cd6617e5b1c4b0a6df375d878d33f129760
..\2489d3c4.exe  4647ce012bbf65b719dbde5f3027cdfd155738
..\4892c772.exe  a3d7d27a78294b2c1ff1600b3a750002876544
..\a338747d.exe  08b5180693be43591a8970dd04bb385f1546581
..\3d470b14.dll4.0.2.111Microsoft Corporation2b70e30d6245b96996f346f81e0d6abb70144
..\61a7fa60.exe2.0.0.0Steven9088f85cb6495da6331a6a2183f830d9164786146
..\6a287190.dll  753b5dd1c198cd473ae67dfad226ba3e11247
..\42671476.exe  87c68dbdbafd1e3bc52371cd15988a4033520
..\97b68f1d.exe  3b7c427367db2eb29b461e77f02e5767233984
..\3084def6.exe  31c8a4e2c286b7c6bc5ee54c54a8482422528
..\361709ec.exe  8f4abbc28d35e66b34fb9cd39ad7970c6314
..\5d4ad0d1.exe  3084b715319c715b2c887f6211fe96c18704
..\e211849c.exe  286c1f456db971bc71d414697471a2cd62976
..\2099d947.exe1.0.0.0New Holding sa3abecddf1aff0f7aadd97462044d852322120
..\38d5f07b.exe  210e9fcc0c2e09fcf4a76eff9830fa418447
..\2a7a7354.exe3.2.2.0 d556ca4a54f600f8cc0882ac835c76d4501248
..\9739f381.exe  62236aa1be255f4a744259f3874d694510240
 When the Clicker is executed, it creates the following Registry entries:
 
•..\software\gyhkf
•..\software\microsoft\internet explorer\main\start page\"http://www.928476362.com/?rid=mc002"
•..\software\microsoft\windows\currentversion\run\"gyhkf"
•..\software\microsoft\windows\currentversion\run\"vwbcm"
•..\software\rcash
•..\software\vwbcm
•..\software\cc
•..\software\classes\ckbho_2.bho
•..\software\classes\ckbho_2.bho.1
•..\software\classes\clickdll.iedll
•..\software\classes\clickdll.iedll.1
•..\software\classes\clsid\{06d50124-f1a2-4648-a3fb-3832167aa39d}
•..\software\classes\clsid\{10fdce1e-c36a-474e-808e-248c51693db7}
•..\software\classes\clsid\{214d7d5c-bd33-e384-8639-2c845e1a59f4}
•..\software\classes\clsid\{43a9559e-1dd2-11b2-9b1d-d9819eaa3f5f}
•..\software\classes\clsid\{523c33cb-510e-4857-9801-78f1d892879c}
•..\software\classes\interface\{041c3db2-2b68-4b4a-b011-c24a7a7870f9}
•..\software\classes\typelib\{48df5eae-2059-4081-b404-1ce27fcede72}
•..\software\classes\typelib\{930e11ea-3a91-4fbb-b141-dc53df650dff}
•..\software\classes\typelib\{db621d78-d4df-4fd3-ab8c-a55585c1bd1d}
•..\software\classes\windows.ierb
•..\software\classes\windows.ierb.1
•..\software\microsoft\windows\currentversion\policies\explorer\run\"3sdzna5ksj"
•..\software\microsoft\windows\currentversion\run\"drmsrv32"
•..\software\microsoft\windows\currentversion\run\"puzqzgvy"
Recommendation to remove Clicker.Agent
Spyware Detector can remove Clicker.Agent, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback. 
Speed up your computer and increase browsing performance by deleting Spyware & Adware
Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.
Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.
 
Free Spyware Scan
 Search Threats
Testimonials

Read More
Information Desk
Spyware & Adware Categories we scan
  
List of Spyware &
Adware we remove
Submit a Threat
Submit a threat to be reviewed by our research team

Submit a Threat
Home| About Us| Purchase| Contact Us| FAQ| Privacy Policy