Home / malware

PDF

Application.180solutions.Zango

First posted on 21 November 2011.
Source: BitDefender

Aliases :

Application.180solutions.Zango is also known as Adware.180Search,Adware.Win32.180Solutions,Adware.180Solutio.

Explanation :

Application.180solutions.Zango is an ad supported software that runs in the background and although it has a icon in the taskbar it won't let you unload it through standard methods it also sends information to the home site about your browsing habbits and displays ads based on the keywords you search. It also has a searchbar that displays irelevant or sponsored links if you type in keywords.

Files and folders created:
C:Documents and SettingsAll UsersStart MenuProgramsango
C:Program Filesango Programs
C:Program Filesango
C:WINNTDownloaded Program FilesClientAX.dll

Registry keys created:
HKEY_CLASSES_ROOTAppID{F1F040D5-E8F8-4680-B101-9334E9773841}
HKEY_CLASSES_ROOTAppIDangoToolbar.DLL
HKEY_CLASSES_ROOTClientAX.ClientInstaller.1
HKEY_CLASSES_ROOTClientAX.ClientInstaller
HKEY_CLASSES_ROOTClientAX.RequiredComponent.1
HKEY_CLASSES_ROOTClientAX.RequiredComponent
HKEY_CLASSES_ROOTClientAX.ZangoClientAX.1
HKEY_CLASSES_ROOTClientAX.ZangoClientAX
HKEY_CLASSES_ROOTLMgr180.WMDRMAx.1
HKEY_CLASSES_ROOTLMgr180.WMDRMAx
HKEY_CLASSES_ROOTzangohook.SABHO.1
HKEY_CLASSES_ROOTzangohook.SABHO
HKEY_CLASSES_ROOTangoToolbar.ZCToolBand.1
HKEY_CLASSES_ROOTangoToolbar.ZCToolBand
HKEY_CURRENT_USERSoftwarezango
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar{EA0D26BD-9029-431A-86E0-83152D67828A}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{56F1D444-11BF-4879-A12B-79CF0177F038}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunzango REG_SZ, 70 bytes, ""c:program fileszangozango.exe""
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallango Toolbar
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallzango
HKEY_LOCAL_MACHINESOFTWAREango Programs
HKEY_LOCAL_MACHINESOFTWAREzango

Last update 21 November 2011

 

TOP