Troj/AdClick-AP is a Trojan for the Windows platform.
Troj/AdClick-AP includes functionality to access the internet and communicate with a remote server via HTTP.
The following registry entry is created to run Troj/AdClick-AP on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
hxadsec
<pathname of the Trojan executable>
The Troj/AdClick-AP is registered as a COM object, creating registry entries under:
HKCR\CLSID\(728208CE-21C2-46D8-9608-4F51E5A9C57C)
HKCR\Interface\(8CF36955-8D36-469B-A1FD-1C0F2FD595C0)
HKCR\TypeLib\(CC8FAA8A-E93A-49AD-A4A8-E1F5317D83C7)
HKCR\hxadsec.CHXSoft\
Registry entries are also created under:
HKCR\CLSID\(48E59293-9880-11CF-9754-00AA00C00908)\
HKCR\CLSID\(48E59294-9880-11CF-9754-00AA00C00908)\
HKCR\CLSID\(48E59295-9880-11CF-9754-00AA00C00908)\
HKCR\InetCtls.Inet\
HKCR\InetCtls.Inet.1\
HKCR\Interface\(48E59291-9880-11CF-9754-00AA00C00908)\
HKCR\Interface\(48E59292-9880-11CF-9754-00AA00C00908)\
HKCR\TypeLib\(48E59290-9880-11CF-9754-00AA00C00908)\1.0\