Home / malware

PDF

Adware:Win32/CostMin

First posted on 23 April 2014.
Source: Microsoft

Aliases :

There are no other names known for Adware:Win32/CostMin.

Explanation :

Threat behavior

Installation

Adware:Win32/CostMin adds a plug-in to Internet Explorer, Firefox, and Chrome:





The program creates the following files and folders:

• %ALLUSERPROFILE% \CostMin
• %APPDATA% \Mozilla\Firefox\Profiles\????????.default\extensions\51d15c58d6f18@51d15c58d6f51.com
• %APPDATA% \Mozilla\Firefox\Profiles\????????.default\extensions\ath-4txop@jxsqdueil.net
• %LOCALAPPDATA% \Google\Chrome\User Data\Default\Extensions\epbobadpdjhmhnnokljfjbmjbjkkamic
• %ProgramFiles% \CostMin
• %USERPROFILE% \AppData\LocalLow\{6F55A296-E5BC-A3C0-35AD-973ABC6AB009}
• C:\Users\All Users\CostMin

Behavior

Adware:Win32/CostMin shows you ads as you browse the Internet, as shown in the following examples:










Analysis by Michael Johnson

Symptoms

The following could indicate that you have this program on your PC:

• You see ads appear in your Internet browser that weren't there before

Last update 23 April 2014

 

TOP