Home Malware Programs Adware GAIN

GAIN

Posted: March 28, 2006

GAIN is a prevalent adware spyware that tracks user browsing habits, downloads and shows undesirable commercial advertisements. GAIN is installed by some ad-supported software.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 applist.htm
    2 appmgr.cfg
    3 appmgrgui.zip
    4 cmediagnostics.log
    5 cmeiiapi.dll
    6 cmesys.exe
    7 debut.htm
    8 fsg_[XVS].exe
    9 gappmgr.dll
    10 gatorsupportinfo.txt
    11 gcontroller.dll
    12 gdwldeng.dll
    13 giocl.dll
    14 gioclclient.dll
    15 gmt.exe
    16 gmtproxy.dll
    17 gobjs.dll
    18 gstore.dll
    19 gstoreserver.dll
    20 gsvcmgr.dll
    21 gsvcsap.dll
    22 gtools.dll
    23 guninstaller.exe
    24 trickler_[XVS].exe
    25 welcome.htm

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTHDPlugin.HDPluginCtrlHKEY_CLASSES_ROOTHDPlugin.HDPluginCtrl.1HKEY_CLASSES_ROOTtjlteptHKEY_LOCAL_MACHINESOFTWAREGator.comHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunCMESysHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunTricklerHKEY_LOCAL_MACHINESOFTWAREhlnpan
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}2EC7A834-9C5E-4154-BADC-0D86A2EDC82D22D34833-06F9-4CE6-9FF7-CE4DA0BA351DDBAE7000-01EC-4162-8FEB-8A27AC937CA0

Related Posts

Loading...