Home Malware Programs Potentially Unwanted Programs (PUPs) Steel Cut Ads

Steel Cut Ads

Posted: February 9, 2015

Threat Metric

Ranking: 19,712
Threat Level: 2/10
Infected PCs: 2,195
First Seen: February 9, 2015
Last Seen: January 29, 2025
OS(es) Affected: Windows

Steel Cut Ads is an adware program that is committed to displaying random advertisements as pop-ups or banners mostly when computer users are attempting to surf the internet. Steel Cut Ads may track internet activity and web browser history to display advertisements that include products or services that have been viewed before on the same computer. Through the Steel Cut Ads, computer users may be redirected to other unwanted sites that have questionable content through their various offers or so-called discounts. From the numerous advertisements that Steel Cut Ads may display, performance of web browser applications could suffer. Alleviating these issues and stopping the Steel Cut Ads from being displayed may require use of an antispyware application to safely detect and remove all Steel Cut Ads components from your computer.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{0A875F23-A995-4BB6-804A-5AD8D10C31D7}{581f8d6b-754f-4b80-88f6-6037771c0a44}{AE035394-9C43-4050-89E5-7507C17AE524}File name without pathapi.mysteelcut[1].xmlapimysteelcutcom-a.akamaihd[1].xmlhttps_api.mysteelcut.com_0.localstoragehttps_api.mysteelcut.com_0.localstorage-journalhttps_apimysteelcutcom-a.akamaihd.net_0.localstoragehttps_apimysteelcutcom-a.akamaihd.net_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{581F8D6B-754F-4B80-88F6-6037771C0A44}Software\Microsoft\Internet Explorer\DOMStorage\api.mysteelcut.comSoftware\Microsoft\Internet Explorer\DOMStorage\mysteelcut.comSOFTWARE\Microsoft\Tracing\updateSteelCut_RASAPI32SOFTWARE\Microsoft\Tracing\updateSteelCut_RASMANCSSOFTWARE\Microsoft\Tracing\utilSteelCut_RASAPI32SOFTWARE\Microsoft\Tracing\utilSteelCut_RASMANCSSOFTWARE\Steel CutSOFTWARE\Wow6432Node\Microsoft\Tracing\updateSteelCut_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updateSteelCut_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\utilSteelCut_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\utilSteelCut_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{581f8d6b-754f-4b80-88f6-6037771c0a44}SOFTWARE\Wow6432Node\Steel CutSYSTEM\ControlSet001\services\eventlog\Application\Update Steel CutSYSTEM\ControlSet001\services\eventlog\Application\Util Steel CutSYSTEM\ControlSet001\services\Update Steel CutSYSTEM\ControlSet001\services\Util Steel CutSYSTEM\CurrentControlSet\services\eventlog\Application\Update Steel CutSYSTEM\CurrentControlSet\services\eventlog\Application\Util Steel CutSYSTEM\CurrentControlSet\services\Update Steel CutSYSTEM\CurrentControlSet\services\Util Steel CutHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Steel Cut

Additional Information

The following directories were created:
%PROGRAMFILES%\Steel Cut%PROGRAMFILES(x86)%\Steel Cut%Temp%\Steel Cut
The following URL's were detected:
mysteelcut.com
Loading...