Home

Advertisement

Customize

November 2009

S M T W T F S
1234567
891011121314
15161718192021
22232425262728
2930     

Tags

Syndicate

RSS Atom
Powered by LiveJournal.com

Oct. 18th, 2008

.ClickDLoader: Not all Adware is the same

The adware known as .ClickDLoader, originally launched back in 2004, is an exceptional kind of internet bug. It can create other adware programs and cause a higher intensity of problems than many other adware programs. It receives a high level security warning, and most definitely needs to be removed from your computer.

The basic issue with adware is that it’s not so much a threat as a nuisance. It’s the least malignant of the internet parasites collectively called “malware.” No real lasting damage is done to your computer, but the problems it causes while it’s on your computer are bad enough.

Usually, what happens is that it downloads onto your computer without your notice or consent. It then provides annoyances in the form of pop up, pop under, banner, and imbedded web link advertisements. Quite often, they are immune to pop up blockers, and can be hard to get rid of. Sometimes the content of the advertisements are pornographic in nature, which can be disconcerting to a user in respect to their spouses, children and supervisors.

As if that wasn’t bad enough, they will also search through your temporary files for browsing history and tracking cookies. They then transmit this information to a remote server, which can then supply more user-specific advertising. It is uncertain if there is any criminal use of this information happening, but it is entirely possible. This activity will, at any rate, use a significant amount of the computer’s memory and the internet connection’s bandwidth. This causes programs and webpages to load and run slowly, and may cause program errors and the whole computer may lock up. It’s safe to say that this software is far more annoying than any television commercial.

.ClickDLoader, as mentioned earlier, is particularly nasty. After being downloaded and manually installed (usually as part of a “bundle” package with infected software), it creates and runs three other files named bhui.exe, services.exe, and arpa.exe under the Windir and System32 files. They show up on adware scans as “Download.Adware,” “Adware.Clickbank,” and “Adware.Clickbank,” respectively. That makes a total of four adware programs in one! These programs then try to download files “for your viewing pleasure” from hop.clickbank.net, purityscan.com, searchbarcash.com, xxxtoolbar.com, ucbill.com, and mt-download.com.



Advertisement

Customize