Home Malware Programs Adware Margoc

Margoc

Posted: March 28, 2006

Margoc is an adware spyware that shows undesirable pop-up advertisements. The threat may contact a predetermined remote server and receive additional instructions. Margoc must be manually installed. It loads every time the user starts a web browser and can silently run on Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 regsvrac32.dll
    2 restsrv32.sys
    3 restsrv32a.sys

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOnce[randomfilename]

Related Posts

Loading...