Home Malware Programs Adware NaughtyPops

NaughtyPops

Posted: March 28, 2006

NaughtyPops is an adware spyware that tracks user browsing habits and shows relevant commercial advertisements. It has the ability to update itself via the Internet. NaughtyPops can get into the computer while visiting some unsafe web sites.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ctadl.inf
    2 ctadl3.dll
    3 cttdl.cab

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREAPDLHKEY_LOCAL_MACHINESOFTWAREClassesCtadl1.ctadlHKEY_LOCAL_MACHINESOFTWAREClassesCtadl1.ctadl.1HKEY_LOCAL_MACHINESOFTWAREClassesCtadl1.ctadlctrlHKEY_LOCAL_MACHINESOFTWAREClassesCtadl1.ctadlctrl.1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionModuleUsageC:/Windows/System32/ctadl3.dll
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}458BE2D9-F8DB-43D1-A7EF-73E29C4EF9B696515724-397E-48C7-8974-86C203E666E107E890E3-EF0C-4EA6-9F79-C5749ACA9CC1AEFCDEC8-EB7D-429F-BC73-4F30D07BFE4187D1A6EF-8CBC-458A-84B5-0333562418CD
Loading...