Adware or adwars?

02 Nov 2004

minute read

Eugene Kaspersky

Authors

Eugene Kaspersky

First time in my life I see how different AdWares fight each other. A new 21KB Win32 executable first removes data files and registry keys which belongs to EliteBar AdWare (according to KAV anti-AdWare databases) and then opens one of two Ad URLs. It seems that the AdWare market is going to be a hot one and different AdWare coders face a lot of competition from each other. Obviously they will fight. Remember Bagle-NetSky-Mydoom war?..

We detect this adware as TrojanClicker.Win32.Agent.af.

Adware or adwars?

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Latest Posts

Latest Webinars

Reports

An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.

Cloud Atlas attacks the public sector and diplomatic structures of Russia and Belarus, using ReverseSocks, SSH, and Tor for persistence in infected systems and its new tool, PowerCloud.

Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.

Kaspersky researchers uncovered malicious wheel packages in PyPI that targeted both Windows and Linux and contained a dropper delivering malware dubbed ZiChatBot. We attribute this activity to OceanLotus APT.

Adware or adwars?

GReAT Ideas. Balalaika Edition

GReAT Ideas. Green Tea Edition

GReAT Ideas. Powered by SAS: malware attribution and next-gen IoT honeypots

GReAT Ideas. Powered by SAS: threat actors advance on new fronts

GReAT Ideas. Powered by SAS: threat hunting and new techniques

The Winlock case – I’m taking bets!

Epassports and anonymity – what I think

The Cybercrime Arms Race

Drawing the line

It’s all in the number

The game is over: when “free” comes at too high a price. What we know about RenEngine

Deep analysis of the flaw in BetterBank reward logic

Post-exploitation framework now also delivered via npm

Massive npm infection: the Shai-Hulud worm and patient zero

The SOC files: Rumble in the jungle or APT41’s new target in Africa

Latest Posts

Threat landscape for industrial automation systems. Q1 2026

When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website

Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign

Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects

Latest Webinars

The dark side of mobile: Threats targeting Android & iOS

Securing the pipeline: 2026 supply chain threats

Missed incidents: Compromise Assessment insights

AI meets cybersecurity: Powering the next digital move

Reports

ToddyCat: your hidden email assistant. Part 2

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Kimsuky targets organizations with PebbleDash-based tools

OceanLotus suspected of using PyPI to deliver ZiChatBot malware