Adware/CommanderNET

description-logoAnalysis

The downloader program for this adware goes by the filename dbc_crack.exe. When executed, it drops two files: msiev32.dll and winvbie.dll. These two files will then be registered in the registry under the Folder "InprocServer32."
Once the registry is patched and when the Internet Explorer is opened, the dll files will be executed. This will inturn download additional files from http://get.inetbar.com. Then, it creates new entries in registry using the name Network Synergy.

Telemetry logoTelemetry