Virus Search
 
Win-Downloader/Adod.28672
 
 
System Risk Network Risk Spread Risk Current Spread Level
Medium N/A N/A N/A
Aliases  
Primary Symptoms    
Infected OS Windows Infected Route File Execution
Kind Spyware Infected Type Executable File
Origin Unknown Specific Working Date N/A
Date Discovered  (local time) Date Discovered in Korea  
AhnLab's Countermeasure You can scan this virus with Engine version 2007.05.08.00 
You can cure this virus with Engine version 2007.05.08.00 

Summary
Win-Downloader/Adod.28672 is a Downloader that downloads and installs other malicious programs without the user's agreement. 

Content

[Folder and File]

The following is Folders and Files that Win-Downloader/Adod.28672 creates.

%PFDIR%\adode\ (Folder)
%PFDIR%\adode\adodemaster.exe



[Registry]

The following is Registry keys that Win-Downloader/Adod.28672 creates.

HKCU\SOFTWARE\adode
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\adodemaster



[Download URL]

The following is address and filename that Win-Downloader/Adod.28672 downloads.

http://file.******.co.kr/setup/adodemaster.exe.101



A downloader is a program that connects the system to web sites or FTP sites to download and install files.

? %PFDIR% folder is employed to install programs. Users can change the location of the folder. Following is the path generally used:

C:\Program Files