Home / malware

PDF

Adware.Gator.C

First posted on 21 November 2011.
Source: BitDefender

Aliases :

There are no other names known for Adware.Gator.C.

Explanation :

This executable is part of the Gator/GAIN advertising system. It almost never comes as standalone, but with some other ad-supported applications. Upon installation of this programs, the trickler is ran, which adds itself to HKLMSoftwareMicrosoftWindowsCurrentVersionRun, to be run at each startup, under the key Trickler.

The file name varies, depending on the version being installed. It usually resides in the temporary folder created by the installer that dropped it there, but sometimes will be copied to a separate folder by the installer.

When ran, the trickler will slowly download the rest of GAIN (Gator Advertising and Informational Network) or update it after install. It has a very low bandwidth usage in hope its traffic will remain unnoticed.

It keeps its settings under HKLMSoftwareGator.com and HKLMSOFTWAREClassesCLSID{21F5A790-53EA-3D73-86C3-A5BA6CF65FE9}.

Last update 21 November 2011

 

TOP