Threat Database Adware Adware:Win32/OneTab

Adware:Win32/OneTab

By Domesticus in Adware

Threat Scorecard

Ranking: 14,389
Threat Level: 20 % (Normal)
Infected Computers: 463
First Seen: February 7, 2013
Last Seen: September 10, 2023
OS(es) Affected: Windows

Adware:Win32/OneTab is an adware application/browser add-on that shows out-of-context ads on the compromised machine, and sets ads and hyperlinks into hijacked websites in an affected web browser. While being installed on the vulnerable PC, Adware:Win32/OneTab makes system modifications by downloading harmful files and registry entries. Adware:Win32/OneTab installs itself as a BHO (browser helper object), which can be seen in a Manage Add-ons window of Internet Explorer.

File System Details

Adware:Win32/OneTab may create the following file(s):
# File Name Detections
1. uninstall.exe
2. OneTab.dll
3. system.dll
4. OneTab.crx

Registry Details

Adware:Win32/OneTab may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{16ADEA98-D215-4F51-80AF-5E5ED660B9C0}\InProcServer32 "(default)" = "c:\documents and settings\administrator\application data\onetab\onetab.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\[RANDOM CHARACTERS]"path" = "c:\documents and settings\administrator\application data\onetab\onetab.crx"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{16ADEA98-D215-4F51-80AF-5E5ED660B9C0} "(default)" = "onetab add-on"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{16ADEA98-D215-4F51-80AF-5E5ED660B9C0} "(default)" = "onetab add-on"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneTab "DisplayName" = "onetab"

URLs

Adware:Win32/OneTab may call the following URLs:

bestdailyrewards.com

Trending

Most Viewed

Loading...