Threat Database Adware Adware.KorAd

Adware.KorAd

By LoneStar in Adware

Threat Scorecard

Ranking: 2,407
Threat Level: 20 % (Normal)
Infected Computers: 24,354
First Seen: November 29, 2015
Last Seen: September 29, 2023
OS(es) Affected: Windows

Adware.KorAd is an adware infection that has been linked to various symptoms ranging from innocuous or irritating to extremely disruptive. Adware.KorAd can cause pop-up advertisements, browser redirects, and system performance issues. The main goal of Adware.KorAd is to display advertisements on the affected Web browser. Despite the fact that Adware.KorAd is usually associated with a browser toolbar marketed as a useful tool, these types of browser toolbars are usually categorized as PUPs, or Potentially Unwanted Programs, because of the many irritating symptoms typically associated with them. Despite its claims, Adware.KorAd is specifically designed to expose computer users to marketing material and advertisements rather than to provide any type of useful service.

Why Adware.KorAd and Similar Content May Be Considered Harmful

Adware.KorAd should be removed immediately from the affected Web browser. One of the main reasons for this is that Adware.KorAd and content associated with Adware.KorAd may be installed as a Web browser extension or add-on. Adware.KorAd may spy on your online activity, save data related to your Web browsing habits and history, and then sell this data to marketers or use it to deliver advertisements to your Web browser. These concerns have made PC security researchers become worried about Adware.KorAd and its effects on your computer. It is important to note that any supposed services offered by Adware.KorAd may be found on free alternatives that do not expose your computer to potentially unsafe content or profit at your expense.

What Makes PUPs Like Adware.KorAd Different from Malware

Adware.KorAd is classified as a PUP, meaning that Adware.KorAd is not as threatening or difficult to remove as Trojans or other forms of threats. However, this does not mean that Adware.KorAd's symptoms are any less irritating or disruptive. In fact, a Web browser affected by Adware.KorAd may become nearly impossible to use. This is also especially true because Adware.KorAd may not be installed alone. If Adware.KorAd is installed on your Web browser, it is highly likely that other content similar to Adware.KorAd has been installed on your Web browser as well. This may result in significant system performance issues and a noticeable slowing down of your Internet connection.

SpyHunter Detects & Remove Adware.KorAd

File System Details

Adware.KorAd may create the following file(s):
# File Name MD5 Detections
1. ancamcorderupdate.exe baae2beaf4ce8833b0ca494b014d5d99 407
2. vcodecopen.exe 438b5397903be0326335d7347f92cc15 389
3. vcodecopen.exe d69828e8b3edae493cec9f024a47e15d 308
4. CertKeySvc.exe 4ece80d354e6df69d56fec38b7887392 291
5. filedownopen.exe 135c6c2c8429cdec958166c2a117de14 195
6. ancamcorderupdate.exe 41cc50e1e01942043d6032d8ed2404eb 195
7. anrecorderup.exe 1361fc100634758941da78aa93748975 159
8. filedownopen.exe 880dd99a1086b46260b7fb0d5bc7757c 135
9. filedownopen.exe eb7ffd7277cfb9d8c2328d0267f56b27 127
10. filedownopen.exe 3c8ee232b286c2e753e91de45c5423b4 63
11. _ISZone.exe ca69e174e4852bf006368d483e5a7709 56
12. vcodecopen.exe e2a5a71dc6637c4399b68e9b8c16ab77 56
13. vcodecopen.exe c24d32f6e97925a38505b3c75ceeed06 54
14. filedownopen.exe 555f5d7fbb40beaada4ee04e43f94abb 36
15. filedownopen.exe 7acdcb59cbf14e26428f592649deac6b 30
16. filedownopen.exe 3e697e07114c07de07d3dcf48e2e91f1 28
17. vcodecopen.exe 927e56b4642b6a58d73193cfd0587dcb 28
18. vcodecopen.exe 1d0ff734de8c59754b0b93a15fa628c5 26
19. _ISZoneUpdate.exe 552bcc406267996062b834e6b37a6927 17
20. CertKey.exe 8a427bab0210b9ebf71d9d3e143d0171 14
21. filedownopen.exe 417a2ca06dc82204b7982e2cd0239711 13
22. Enumerate_gt10_hinst.exe 4ef35ce215ed616f817acf2c836d3179 10
23. ISZoneUpdate.exe 6b6957d9c8c95dd0b117273c5f04c729 1
24. ISZoneInstall_66_156.exe 258eee58c29fb3972dc092d4fb184f11 1
25. ISZoneUpdate.exe 51708968c0fd709a36211ea754a58909 1
26. ISZone.exe 2a60b24404a69ae752ce5091ddcbbc31 1
27. uninst.exe 28fcf77bea4250bba1d2d8e74e0f7812 1
More files

Registry Details

Adware.KorAd may create the following registry entry or registry entries:
CLSID
{06F5FFD1-C190-40E9-83D4-9A943BB1771C}
{122DB512-8B45-45B4-B2A6-865C803883BD}
{F1A015C9-8106-4120-9D18-21BAEDAB20FF}
Regexp file mask
%allusersprofile%\plugins\wngplog.exe
%APPDATA%\FVPlus\FVPlus.exe
%WINDIR%\mcsmscmw{5,6}.exe
Software\AnCamCorder
Software\AnCamera
Software\Antools
SOFTWARE\Classes\Iekey.iekeybho
SOFTWARE\Classes\Iekey.iekeybho.1
Software\DreamTong
Software\KeywordMap
Software\Microsoft\Internet Explorer\Approved Extensions\{F1A015C9-8106-4120-9D18-21BAEDAB20FF}
Software\Microsoft\Internet Explorer\DOMStorage\ancamera.co.kr
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{F1A015C9-8106-4120-9D18-21BAEDAB20FF}
Software\Microsoft\Windows\CurrentVersion\Run\DtsGuard
Software\Microsoft\Windows\CurrentVersion\Run\DtsMainCon
Software\Microsoft\Windows\CurrentVersion\Run\searchlike
Software\mopop
Software\searchlike
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{F1A015C9-8106-4120-9D18-21BAEDAB20FF}
SYSTEM\ControlSet001\services\srvmopop
SYSTEM\ControlSet002\services\srvmopop
SYSTEM\CurrentControlSet\services\srvmopop
AnCamCorder
AnCamera
Antools
Micro OpenPop
searchlike
Windows Internet Explorer Smart Service4.0

Directories

Adware.KorAd may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ahnsoft
%ALLUSERSPROFILE%\netbean
%APPDATA%\DreamTong
%APPDATA%\HipPop
%APPDATA%\IEsearchtool
%APPDATA%\KMPHelper
%APPDATA%\Microadpop
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Ahnsoft
%APPDATA%\MultiCodec
%APPDATA%\Windows NewsGo
%APPDATA%\filedown_new
%APPDATA%\iconmania
%APPDATA%\newgoplus
%APPDATA%\purwa
%APPDATA%\servicehost
%APPDATA%\smartaddress
%APPDATA%\vCodec
%APPDATA%\windoguide
%LOCALAPPDATA%\NewsGo
%LOCALAPPDATA%\Windows BT Icons
%LOCALAPPDATA%\searchlike
%LOCALAPPDATA%\windows mbt icons
%PROGRAMFILES%\AHNSOFT
%PROGRAMFILES%\ISZone
%PROGRAMFILES%\Windows Facilitate
%PROGRAMFILES%\hyperc
%PROGRAMFILES%\windoguide
%PROGRAMFILES(X86)%\AHNSOFT
%PROGRAMFILES(X86)%\ISZone
%PROGRAMFILES(x86)%\Windows Facilitate
%PROGRAMFILES(x86)%\hyperc
%PROGRAMFILES(x86)%\windoguide
%PUBLIC%\InkDiet
%UserProfile%\Local Settings\Application Data\Windows BT Icons
%UserProfile%\Local Settings\Application Data\searchlike
%appdata%\FileDoumi
%appdata%\KeywordMap
%appdata%\MOpop
%appdata%\OutTab
%appdata%\RollingPop
%appdata%\VPro Defender
%appdata%\relatedpop

Trending

Most Viewed

Loading...