Home Malware Programs Adware Ro2cn

Ro2cn

Posted: March 28, 2006

Ro2cn is a typical adware designed to show undesirable commercial advertisements. It also can download suspicious files from predefined domain. Ro2cn can secretly get into the computer while visiting some unsafe web sites.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 usign.dll
    2 usign.sys

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTIpripw.WbhoHKEY_CLASSES_ROOTIpripw.Wbho.1HKEY_LOCAL_MACHINESOFTWAREClassesIpripw.Wbho.1HKEY_LOCAL_MACHINESOFTWAREClassesIpripw.WbhoCLSID
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}40E3A34A-3282-41F8-AD2C-051BAB96AD4A
Loading...