Adware.Win32.Cydoor

Technical Details

The program normally contains the following files:

cd_clint.dll 
cd_load.exe 
cd_htm.dll 
cd_swf.dll 
iMesh.ex

The cd_clint.dll file provides the main functionality. The program is capable of working with P2P networks such as Kazaa and Imesh.

The program creates the following registry keys:

[HKEY_LOCAL_MACHINESoftwareCydoor]
[HKEY_USERS.DEFAULTSoftwareCydoor]
[HKEY_USERS.DEFAULTSoftwareCydoor Services] [HKEY_CURRENT_USERSoftwareCydoor Services] [HKEY_CURRENT_USERSoftwareCydoor]

It works with the following Internet servers:

www.cmsN.net
www.bnsN.net
www.rgsN.net

(In all of these names, N will be replaced by a value between 1 and 4)

The list of servers contacted may be added to as the program runs.