ContentMatch

Category: Adware and PUAs Protection available since:22 Jan 2007 00:00:00 (GMT)
Type: Adware Last Updated:03 Nov 2009 13:01:35 (GMT)

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

ContentMatch is an adware application.

When ContentMatch is installed the following files are created:

<Common Files>\CPUSH\cpush.dll
<Common Files>\CPUSH\Uninst.exe
<System>\kdjs1.exe

The file cpush.dll is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11F09AFD-75AD-4E51-AB43-E09E9351CE16}
HKCR\CLSID\{CDE9EB54-A08E-4570-B748-13F5DDB5781C}
HKCR\CLSID\{34A12A06-48C0-420D-8F11-73552EE9631A}
HKCR\CLSID\{11F09AFD-75AD-4E51-AB43-E09E9351CE16}
HKCR\NewMediasPopup.EdLogic
HKCR\NewMediasPopup.EdLogic.1
HKCR\NewAdPopup.ToolbarDetector
HKCR\NewAdPopup.ToolbarDetector.1
HKCR\NewAdPopup.PopupBlock.1
HKCR\NewAdPopup.PopupBlock

The following registry entry is set, affecting internet security:

HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
<Program Files>\Internet Explorer\IEXPLORE.EXE
<Program Files>\Internet Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer

Registry entries are created under:

HKLM\SOFTWARE\Sohu R&D\Download
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ContentMatch
HKLM\SOFTWARE\cpush

ContentMatch provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "AdPush Software".

download Try Sophos products for free
Download now