Adshot exhibits the following characteristics:
Other vendor detection
- Avira
- ADSPY/Adshot.B
- Kaspersky
- not-a-virus:AdWare.Win32.BHO.mkf
Runtime Analysis
Registry Keys Created
- HKCR\CLSID\{38483ADE-B4FB-4CD3-AB11-21F646AE0F4B}\InprocServer32
- (Default)
- c:\test_item.dll
- HKCR\CscrptXt.CscrptXt\CLSID
- (Default)
- {E0EC6FBA-F009-3535-95D6-B6390DB27DA1}
- HKCR\adShotHlpr.adShotHlpr\CurVer
- (Default)
- adShotHlpr.adShotHlpr.1.0
- HKCR\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\VersionIndependentProgID
- (Default)
- CscrptXt.CscrptXt
- HKCR\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\ProgID
- (Default)
- CscrptXt.CscrptXt.1.0
- HKCR\CscrptXt.CscrptXt\CurVer
- (Default)
- CscrptXt.CscrptXt.1.0
- HKCR\CLSID\{38483ADE-B4FB-4CD3-AB11-21F646AE0F4B}
- AppID
- HKCR\adShotHlpr.adShotHlpr\CLSID
- (Default)
- {BA8A7666-1F2A-407C-BF2B-80EC0DA6AE41}
- HKCR\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}
- AppID
- HKCR\CscrptXt.CscrptXt.1.0
- (Default)
- CscrptXt Object
- HKCR\AppID\{38061EDC-40BB-4618-A8DA-E56353347E6D}\instl\Data
- prdctId
- skb
- HKCR\CscrptXt.CscrptXt
- (Default)
- CscrptXt Object
- HKCR\adShotHlpr.adShotHlpr.1.0
- (Default)
- adShotHlpr Object
- HKCR\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\InprocServer32
- ThreadingModel
- apartment
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{38483ADE-B4FB-4CD3-AB11-21F646AE0F4B}
- NoExplorer
- 0x00000001