Not-a-virus:AdWare.Win32.AdMoke.cqj Description

Not-a-virus:AdWare.Win32.AdMoke.cqj is a potentially unwanted advertising program. Not-a-virus:AdWare.Win32.AdMoke.cqj typically displays advertisements in the form of pop-ups or banners. Once inside a PC, Not-a-virus:AdWare.Win32.AdMoke.cqj may redirect a users search request to advertising websites and collect information about the users’ browsing activities. Not-a-virus:AdWare.Win32.AdMoke.cqj is able to run in the background of a PC without being noticed by the user and it does not usually have any uninstall options available.

Type: Adware

Aliases: Mal/BHO-J (Sophos).

How Can You Detect Not-a-virus:AdWare.Win32.AdMoke.cqj?

Not-a-virus:AdWare.Win32.AdMoke.cqj has typically the following processes in memory:

• %ProgramFiles%\caw\caw.dll
• %ProgramFiles%\caw\caw.exe
• %ProgramFiles%\caw\uninstall.exe

Not-a-virus:AdWare.Win32.AdMoke.cqj creates the following registry entries:

• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\caw uninstall]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC01FC6C-842A-47C8-AF52-7203FD440D1B}]
• [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\caw.ccusqw\Clsid]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC01FC6C-842A-47C8-AF52-7203FD440D1B}\ProgID]
• [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\Navigating\.Current]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\caw.ccusqw]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC01FC6C-842A-47C8-AF52-7203FD440D1B}\InprocServer32]

Important Article Disclaimer