ADW_CRORI
January 02, 2015
ALIASES:
WebToolbar.Win32.CroRi.bei (Kaspersky), Win32/Toolbar.CrossRider.Y application (ESET)
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:

Threat Type: Adware
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This adware arrives as a component bundled with malware/grayware packages. It may be manually installed by a user.
It requires its main component to successfully perform its intended routine.
TECHNICAL DETAILS
Tamaño del archivo 891,240 bytes
Tipo de archivo EXE
Residente en memoria No
Fecha de recepción de las muestras iniciales 13 Nov 2014
Arrival Details
This adware arrives as a component bundled with malware/grayware packages.
It may be manually installed by a user.
Installation
This adware drops the following files:
- %Temp%\TMP{random value}
(Note: %Temp% is the Windows temporary folder, where it usually is C:\Windows\Temp on all Windows operating system versions.)
Other Details
This adware requires its main component to successfully perform its intended routine.
It does the following:
- It may install extensions to the following browsers:
- Mozilla Firefox
- Google Chrome