Troj/AdClick-AX is a Trojan for the Windows platform.
Periodically, Troj/AdClick-AX will send web search requests to a number of predefined search engines.
When run, Troj/AdClick-AX will copy itself as SVCHOST.EXE to the "C:\Program Files\Internet Explorer" folder. In order to run automatically each time a user logs in, Troj/AdClick-AX will set the following registry entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Svchost
C:\Program Files\Internet Explorer\svchost.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
Svchost
C:\Program Files\Internet Explorer\svchost.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Svchost
C:\Program Files\Internet Explorer\svchost.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
Svchost
C:\Program Files\Internet Explorer\svchost.exe