Loading ...
Español
Português|
|
Tweet |  More |
AdCare Description
AdCare is a rogue anti-spyware application from the same family as VaccineTree and ResetInfo. AdCare spreads via Trojans. Once inside a machine, AdCare will run a fake system scan and scare the victim by detecting numerous computer threats. AdCare aka Ad Care will also display bogus security alerts and pop-up warnings to alarm the victim further and coerce him/her into purchasing its “full version”. The “full version” of AdCare does not exist and users should not waste their money purchasing this rogue application.
Type: Rogue AntiSpyware Programs
How Can You Detect AdCare?
AdCare Removal Details
AdCare has typically the following processes in memory:
- C:\Program Files\adcare\uninstall.exe
- C:\Program Files\adcare\adcareup.exe
- C:\Program Files\adcare\adcare.exe
AdCare creates the following files in the system:
- C:\Program Files\adcare\ntfile.ini
- C:\Program Files\adcare\img\10.jpg
- C:\Program Files\adcare\img\13_over.jpg
- C:\Program Files\adcare\img\15.jpg
- C:\Program Files\adcare\img\16_over.jpg
- C:\Program Files\adcare\img\256_1.ico
- C:\Program Files\adcare\img\3.jpg
- C:\Program Files\adcare\img\4_over.jpg
- C:\Program Files\adcare\img\6.jpg
- C:\Program Files\adcare\img\7_over.jpg
- C:\Program Files\adcare\img\9.jpg
- C:\Program Files\adcare\img\ber.gif
- C:\Program Files\adcare\img\download.gif
- C:\Program Files\adcare\img\end_popup03.gif
- C:\Program Files\adcare\img\install01.gif
- C:\Program Files\adcare\img\left_btn_02.gif
- C:\Program Files\adcare\img\left_btn_05.gif
- C:\Program Files\adcare\img\left_btn_click_02.gif
- C:\Program Files\adcare\img\left_btn_click_05.gif
- C:\Program Files\adcare\img\left_btn_on_02.gif
- C:\Program Files\adcare\img\left_btn_on_05.gif
- C:\Program Files\adcare\img\main.jpg
- C:\Program Files\adcare\img\messageok.gif
- C:\Program Files\adcare\img\pass_change.gif
- C:\Program Files\adcare\img\title1.gif
- C:\Program Files\adcare\img\title4-1.gif
- C:\Program Files\adcare\img\title5.gif
- C:\Program Files\adcare\img\title7.gif
- C:\Program Files\adcare\img\view_button.gif
- C:\Program Files\adcare\report\2010-08.ale
- C:\Program Files\adcare\value\pattern.da
- C:\Program Files\adcare\value\wcode.da
- C:\Program Files\adcare\value\wcode3.da
- C:\Program Files\adcare\value\wcode6.da
- C:\Program Files\adcare\value\wurl.da
- C:\Program Files\adcare\filecheck.ini
- C:\Program Files\adcare\img\1.jpg
- C:\Program Files\adcare\img\13.jpg
- C:\Program Files\adcare\img\14_over.jpg
- C:\Program Files\adcare\img\16.jpg
- C:\Program Files\adcare\img\2.jpg
- C:\Program Files\adcare\img\2_over.jpg
- C:\Program Files\adcare\img\4.jpg
- C:\Program Files\adcare\img\5_over.jpg
- C:\Program Files\adcare\img\7.jpg
- C:\Program Files\adcare\img\8_over.jpg
- C:\Program Files\adcare\img\alram.gif
- C:\Program Files\adcare\img\dotline_loading.gif
- C:\Program Files\adcare\img\end_popup02.gif
- C:\Program Files\adcare\img\icn_dell.ico
- C:\Program Files\adcare\img\left_btn_01.gif
- C:\Program Files\adcare\img\left_btn_04.gif
- C:\Program Files\adcare\img\left_btn_click_01.gif
- C:\Program Files\adcare\img\left_btn_click_04.gif
- C:\Program Files\adcare\img\left_btn_on_01.gif
- C:\Program Files\adcare\img\left_btn_on_04.gif
- C:\Program Files\adcare\img\loading.gif
- C:\Program Files\adcare\img\main2.jpg
- C:\Program Files\adcare\img\pass.gif
- C:\Program Files\adcare\img\Thumbs.db
- C:\Program Files\adcare\img\title3.gif
- C:\Program Files\adcare\img\title4.gif
- C:\Program Files\adcare\img\title6.gif
- C:\Program Files\adcare\img\tmp2.gif
- C:\Program Files\adcare\img\ws.gif
- C:\Program Files\adcare\value\chdir.da
- C:\Program Files\adcare\value\wac.da
- C:\Program Files\adcare\value\wcode2.da
- C:\Program Files\adcare\value\wcode5.da
- C:\Program Files\adcare\value\wcode8.da
- C:\Documents and Settings\{username}\Start Menu\Programs\adcare\[random characters].lnk
- C:\Program Files\adcare\config.ini
- C:\Program Files\adcare\img\+++n.gif
- C:\Program Files\adcare\img\10_over.jpg
- C:\Program Files\adcare\img\14.jpg
- C:\Program Files\adcare\img\15_over.jpg
- C:\Program Files\adcare\img\1_over.jpg
- C:\Program Files\adcare\img\256_2.ico
- C:\Program Files\adcare\img\3_over.jpg
- C:\Program Files\adcare\img\5.jpg
- C:\Program Files\adcare\img\6_over.jpg
- C:\Program Files\adcare\img\8.jpg
- C:\Program Files\adcare\img\9_over.jpg
- C:\Program Files\adcare\img\del.gif
- C:\Program Files\adcare\img\end_popup01.gif
- C:\Program Files\adcare\img\end_popup04.gif
- C:\Program Files\adcare\img\install02.gif
- C:\Program Files\adcare\img\left_btn_03.gif
- C:\Program Files\adcare\img\left_btn_06.gif
- C:\Program Files\adcare\img\left_btn_click_03.gif
- C:\Program Files\adcare\img\left_btn_click_06.gif
- C:\Program Files\adcare\img\left_btn_on_03.gif
- C:\Program Files\adcare\img\left_btn_on_06.gif
- C:\Program Files\adcare\img\main1.jpg
- C:\Program Files\adcare\img\messageyes_or_no.gif
- C:\Program Files\adcare\img\sysdown.gif
- C:\Program Files\adcare\img\title2.gif
- C:\Program Files\adcare\img\title4-1_.gif
- C:\Program Files\adcare\img\title6-1.gif
- C:\Program Files\adcare\img\tmp.gif
- C:\Program Files\adcare\img\win.gif
- C:\Program Files\adcare\value\b_ac.da2
- C:\Program Files\adcare\value\skey.da
- C:\Program Files\adcare\value\wcode1.da
- C:\Program Files\adcare\value\wcode4.da
- C:\Program Files\adcare\value\wcode7.da
- C:\Documents and Settings\{username}\Start Menu\Programs\adcare\adcare [random characters].lnk
AdCare creates the following registry entries:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\adcareup
- HKEY_CURRENT_USER\Software\adcare
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adcare
Important Article Disclaimer
This entry was last updated on 08/20/10 and posted on 08/20/10.
You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
AdCare
Leave a Comment
Note: Abusive comments are not allowed. Please do not post comments regarding technical support issues. ESG customers that have issues with SpyHunter should open a customer support ticket.