Smart Ads Solutions

Posted: December 7, 2010

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	426

First Seen:	December 7, 2010
OS(es) Affected:	Windows

Smart Ads Solutions is an adware plugin for Internet Explorer. Although Smart Ads Solutions may possess some minor features that can be beneficial, Smart Ads Solutions's primary purpose is to deliver advertisements to your computer. It's suggested that you try to delete Smart Ads Solutions if you find it on your PC, since adware programs like Smart Ads Solutions are known to update their capabilities without permission and monitor web-browsing activities. Because Smart Ads Solutions registers .dll files and alters your Registry, using an automated anti-malware scanner to uninstall Smart Ads Solutions is much easier than trying to uninstall Smart Ads Solutions without any help.

A Smart Solutions for Advertisers but a Poor Solution for Your PC

Smart Ads Solutions advertises itself as a handy plugin (also known as a BHO or Browser Helper Object) for Internet Explorer that 'enhances' your web-browsing experience. You may gain some minor benefits from Smart Ads Solutions, such as being able to change Internet Explorer's outer appearance or 'skin,' but this comes at the high cost of subjecting yourself to advertisements beyond your control.

The harm that Smart Ads Solutions can do is somewhat limited, but Smart Ads Solutions is often seen in the presence of more dangerous rogue security programs like Antimalware Doctor. The primary danger provided by Smart Ads Solutions itself lies in potential exposure to malicious advertisements that link to malicious websites. Adware programs like Smart Ads Solutions also have a tendency to update themselves without your consent and monitor your online activities to deliver advertisements that contain topics of interest.

For the above reasons, Smart Ads Solutions is detected as adware and a low-level threat by many different anti-malware programs. Different scanners may detect Smart Ads Solutions under one of the following names:

Adware.AdSmart.E
Adware.EZLife
Adware.Win3.SmartAdsSolutions
BHO.ZXE
Generic PUP.x!dt
Trojan.Win32.BHO.agbz
Win32/Lifze.C

Defend Yourself Against Smart Ads Solutions

Disabling JavaScript and Flash may help you avoid many different potential attacks embedded in the advertisements delivered by Smart Ads Solutions. Smart Ads Solutions was first noted around the middle of 2010, and has received updates since that time, so you'll likewise want to update your anti-malware software to improve your chances of detecting Smart Ads Solutions.

However, in most cases you shouldn't have trouble noticing Smart Ads Solutions if Smart Ads Solutions is present. Smart Ads Solutions can be seen within the Internet Explorer application's 'Manage Add-Ons' menu and will launch itself whenever Internet Explorer is launched.

Some versions of Smart Ads Solutions will provide an uninstaller, but you're probably better off using a good anti-malware program to remove Smart Ads Solutions instead of trusting in the benevolence of adware. Uninstalling Smart Ads Solutions without assistance may result in a variety of problems, since Smart Ads Solutions creates registers .dll files and creates numerous Registry entries.

Aliases

Trj/Genetic.gen [Panda]Generic20.BGQC [AVG]Generic4.BDUC [AVG]Trojan/Win32.Gen [AhnLab-V3]Adware/SmartAdsSolutions.A.121 [AntiVir]Trojan.Generic.5632099 [BitDefender]Trojan.Gen.2 [Symantec]Artemis!2EE81578AF49 [McAfee]Generic4.BDSY [AVG]Adware/SmartAdsSolutions.A.119 [AntiVir]Generic4.AXET [AVG]Generic20.ASZD [AVG]Trojan.Win32.BHO.bbbh [Kaspersky]Generic4.AYKL [AVG]Generic20.BDJV [AVG]
More aliases (164)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%WINDIR%\$NtUninstallMTF197$\yikxl.dll

File name: yikxl.dll
Size: 240.64 KB (240640 bytes)
MD5: ccf399faec6a54de8c1cfeb26f88a36f
Detection count: 56
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\$NtUninstallMTF197$
Group: Malware file
Last Updated: January 5, 2011

%USERPROFILE%\Local Settings\Application Data\60458344.exe

File name: 60458344.exe
Size: 1.03 MB (1036800 bytes)
MD5: ed91324f0907b0f4b545b7520ab8e469
Detection count: 51
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Local Settings\Application Data
Group: Malware file
Last Updated: December 8, 2010

%USERPROFILE%\Eigene Dateien\Eigene Musik\recfree.exe

File name: recfree.exe
Size: 944.1 KB (944103 bytes)
MD5: 661793f6ff216f92a4a2824072b54cc2
Detection count: 43
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Eigene Dateien\Eigene Musik
Group: Malware file
Last Updated: December 7, 2010

%WINDIR%\$NtUninstallMTF197$\sycsj.dll

File name: sycsj.dll
Size: 240.12 KB (240128 bytes)
MD5: 6de4d957ec1a9ab697da5842cc2643c7
Detection count: 36
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\$NtUninstallMTF197$
Group: Malware file
Last Updated: January 5, 2011

%WINDIR%\$NtUninstallMTF197$\ealbw.dll

File name: ealbw.dll
Size: 299 KB (299008 bytes)
MD5: 02d111215a6c068138b7a994d9ffab86
Detection count: 34
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\$NtUninstallMTF197$
Group: Malware file
Last Updated: January 5, 2011

%WINDIR%\$XNTUninstall643$\cvwsy.dll

File name: cvwsy.dll
Size: 242.17 KB (242176 bytes)
MD5: 48934e12b747827cb0dc9208e1839cbf
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\$XNTUninstall643$
Group: Malware file
Last Updated: March 19, 2011

%WINDIR%\system32\roned.exe

File name: roned.exe
Size: 40.62 KB (40629 bytes)
MD5: 81f4a3c98e5f9b876d4e40aa9f5e70bc
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010

%WINDIR%\$NtUninstallMTF197$\euwya.dll

File name: euwya.dll
Size: 294.91 KB (294912 bytes)
MD5: 4ba7974319ed119ae65ebe5d00bf3631
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\$NtUninstallMTF197$
Group: Malware file
Last Updated: January 6, 2011

%WINDIR%\system32\lnysp.dll

File name: lnysp.dll
Size: 246.78 KB (246784 bytes)
MD5: c8f24e75ec864c745df9105f61abf1cd
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010

%WINDIR%\system32\rpqmkizd.dll

File name: rpqmkizd.dll
Size: 299 KB (299008 bytes)
MD5: b8676f15db361a4173713a8dbe1e1e09
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010

%WINDIR%\$XNTUninstall643$\kocxg.dll

File name: kocxg.dll
Size: 240.64 KB (240640 bytes)
MD5: 2ee81578af4948b8326c8095aae0c6b0
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\$XNTUninstall643$
Group: Malware file
Last Updated: April 11, 2011

%WINDIR%\$NtUninstallMTF197$\rpsoj.dll

File name: rpsoj.dll
Size: 239.61 KB (239616 bytes)
MD5: 11811b9a8aa862af50d4002ea91cc1bf
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\$NtUninstallMTF197$
Group: Malware file
Last Updated: June 13, 2011

%WINDIR%\$NtUninstallMTF197$\umjqd.dll

File name: umjqd.dll
Size: 239.61 KB (239616 bytes)
MD5: cc8935614595f5adedc671377fc97725
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\$NtUninstallMTF197$
Group: Malware file
Last Updated: January 2, 2011