Home Malware Programs Adware Radio Canyon Ads

Radio Canyon Ads

Posted: October 23, 2014

Threat Metric

Ranking: 9,643
Threat Level: 2/10
Infected PCs: 8,141
First Seen: October 23, 2014
Last Seen: October 16, 2023
OS(es) Affected: Windows

Radio Canyon advertisements are adware based on the CrossRider platform. Like other implementations of CrossRider, Radio Canyon advertisements may subvert your browser's settings to load advertisements for the purposes of its personal monetization, and may also hijack your browser to force it to load affiliated sites. Since malware researchers have observed poor business and safety standards behavior from CrossRider products, uninstalling Radio Canyon advertisements with any needed anti-malware products should be considered the safest choice for most PCs.

Falling into a Canyon of Advertisements

Although adware programs are developed and released in numerous, regular releases of variants, many of them are not as independently-produced as their marketing would seem to suggest. The proliferation of general software-development platforms and kits, such as CrossRider, allows even developers with limited coding skill the ability to create products like the Radio Canyon advertisements. Unfortunately, like most of the other examples of CrossRider add-ons, Radio Canyon advertisements' primary features are limited to loading new advertisements into your Web browser.

Other features of Radio Canyon advertisements that malware experts found notable include:

  • Radio Canyon advertisements establish Internet connectivity to communicate and, potentially, download other files.
  • Radio Canyon advertisements subvert some browser security features, such as Internet Explorer's 'Protected Mode,' which alerts the users of Web pages attempting to run software automatically.
  • Radio Canyon advertisements make use of full debug privilege-level access to your PC, which is an invasive and unwarranted degree of system access for any browser add-on.

However, dominant symptoms of Radio Canyon advertisements' installations always crystallize around the injection of advertisements into unrelated Web pages. These advertisements are not certain to have any screening process for guarantees of safe content and may be a point of exposure to attacks against your computer.

Hauling Your Browser out of Radio Canyon Advertisements

Radio Canyon advertisements may market itself as a radio accessibility tool, but indulges in many of the same egregious security and accessibility flaws as other CrossRider products. Like Fraveen, Weather It Up, LyricsPal, Savings Hero, ElectroLyrics or HQTotalS, Radio Canyon advertisements' removal should be assumed to be for the betterment of your browser's safety and performance. Since removing Radio Canyon advertisements require the removal of separate plugins, browser extensions and other components from more than one browser, using anti-adware software is advisable.

Radio Canyon advertisements modify Chrome, Internet Explorer and Firefox simultaneously. While there are no signs of Radio Canyon advertisements encroaching on OSes other than Windows, malware analysts would recommend any PC user to remain wary of software that disrupts your PC's security settings. Symptoms of unusual software activity should be dealt with as aggressively as you would deal with any intruder in your (virtual) home.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\Radio CanyonSOFTWARE\Classes\71c6c330e74701318a6f0adb73eaa5ae0060804.BHOSOFTWARE\Classes\71c6c330e74701318a6f0adb73eaa5ae0060804.BHO.1SOFTWARE\Classes\71c6c330e74701318a6f0adb73eaa5ae0060804.SandboxSOFTWARE\Classes\71c6c330e74701318a6f0adb73eaa5ae0060804.Sandbox.1Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Radio CanyonSoftware\InstalledBrowserExtensions\Radio CanyonSOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Radio Canyon-bg.exeSOFTWARE\Radio CanyonSOFTWARE\Radio Canyon-nvSOFTWARE\Wow6432Node\InstalledBrowserExtensions\13641SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Radio Canyon-bg.exeSOFTWARE\Wow6432Node\Radio CanyonSOFTWARE\Wow6432Node\Radio Canyon-nvHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Radio Canyon

Additional Information

The following directories were created:
%PROGRAMFILES%\Radio Canyon%PROGRAMFILES(x86)%\Radio Canyon%USERPROFILE%\AppData\LocalLow\Radio Canyon