Home Malware Programs Adware AdRoar

AdRoar

Posted: March 28, 2006

AdRoar is an IE browser helper object that shows pop-up windows.
Addroar show the following message:
'This module was compiled with a trial version of Delphi. The trial period has expired.'.
Some versions of AdRoar also have an update process that runs at reboot.

AdRoar downloads advertisements from iads.adroar.com.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ADROAR.DLL
    2 ARUpdate.exe
    3 Cpr.dll
    4 cpruninst.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8HKEY_CURRENT_USERSOFTWAREMicrosoftInternetExplorerToolbarWebBrowserBrowsetothekey:HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunHKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerToolbar
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8FAC6E0E1-5D45-4907-BC00-302D702DCC73
Loading...