ADW_CRORI
January 02, 2015
ALIASES:
WebToolbar.Win32.CroRi.bei (Kaspersky), Win32/Toolbar.CrossRider.Y application (ESET)
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:

Threat Type: Adware
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This adware arrives as a component bundled with malware/grayware packages. It may be manually installed by a user.
It requires its main component to successfully perform its intended routine.
TECHNICAL DETAILS
File Size:
891,240 bytes
File Type:
EXE
Memory Resident:
No
Initial Samples Received Date:
13 Nov 2014
Arrival Details
This adware arrives as a component bundled with malware/grayware packages.
It may be manually installed by a user.
Installation
This adware drops the following files:
- %Temp%\TMP{random value}
(Note: %Temp% is the Windows temporary folder, where it usually is C:\Windows\Temp on all Windows operating system versions.)
Other Details
This adware requires its main component to successfully perform its intended routine.
It does the following:
- It may install extensions to the following browsers:
- Mozilla Firefox
- Google Chrome