English 
Adware.Win32/Nieguide Adware.Win32/Nieguide
By
JubileeX in 
Loading ...
Adware.Win32/Nieguide Description
AdWare.Win32.Nieguide is a malicious software program that displays advertising banners and pop-ups. AdWare.Win32.Nieguide may enter a user’s machine via infected websites or drive-by downloads. AdWare.Win32.Nieguide may also install additional programs onto a user’s machine. AdWare.Win32.Nieguide should be removed with a legitimate security tool to prevent damage to system files.
Type: Adware
Automatic Detection of Adware.Win32/Nieguide
Adware.Win32/Nieguide Technical Report
As new Adware.Win32/Nieguide details are reported by our customers and findings from our Threat Research Center, we will update this section.
Adware.Win32/Nieguide’s Country of Origin:
- Republic Of Korea
Adware.Win32/Nieguide has typically the following processes in memory:
- %ProgramFiles%\Internet Explorer\iexplore.exe
- %ProgramFiles%\nieguideplus\nieguideplus.exe
- %ProgramFiles%\nieguideplus\nieguideup.exe
Adware.Win32/Nieguide creates the following registry entries:
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5D2D31EA-93B8-4EEA-9C88-B8347A33621F}\TypeLib
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5D2D31EA-93B8-4EEA-9C88-B8347A33621F}\VersionIndependentProgID
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5D2D31EA-93B8-4EEA-9C88-B8347A33621F}\InprocServer32
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F5CA43-95FD-4C03-BEF3-3784C4B531F6}\Implemented Categories\{00021493-0000-0000-C000-000000000046}]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5D2D31EA-93B8-4EEA-9C88-B8347A33621F}\ProgID]
Important Article Disclaimer
This entry was posted
on 11/6/09 and is filed under Adware.
You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
