Alley Baggett Sex-E Screen Saver

Alley Baggett Sex-E Screen Saver is an adware bundler that installs Spyware-WebHancer with itself. Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. It also installs Clspring GW that is a kind of Trojan.

General information:

Malware Name:Alley Baggett Sex-E Screen Saver
Malware Type:Adware Bundler
Company Name:White Paw Products
Company URL:http://www.sexy-screen-savers.com/
Threat Level:Elevated Risk
Operating System:WIN XP
Installation Type:Installed through EXE
Operation:Time of After Installation

Company Description:

White Paw Products provides you the software Alley Baggett Sex-E Screen Saver that shows you free sexy photos of this curvaceous, Playboy lingerie model and Entertainment Tonight correspondent. One of today s most popular and prolific nude models, Alley has been voted as one of the most beautiful ladies in the world by publications such as AskMen.com. This screensaver features many different images of Alley provocatively posed in bikinis, lingerie and other revealing outfits.

Spyware Description:

Alley Baggett Sex-E Screen Saver is an adware bundler that installs Spyware-WebHancer with itself. Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. It also installs Clspring GW that is a kind of Trojan.

Characteristics/Symptoms:

    -> It installs Spyware-WebHancer with itself and Clspring GW with itself. -> Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. Clspring GW is a kind of Trojan.

Additional information might be found here:

googleSearch at Google for Alley Baggett Sex-E Screen Saver
bingSearch at Bing for Alley Baggett Sex-E Screen Saver
yahooSearch at Yahoo for Alley Baggett Sex-E Screen Saver

Processes Running:

Alley Baggett Sex-E.scr

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Program Files\Outerinfo\Outerinfo.exe593920Application
C:\Program Files\Outerinfo\outerinfo.ico34494Icon
C:\WINDOWS\webhdll.dll40960Application Extension

Folder information Created after Installation:

Folder Location
C:\Program Files\webHancer\Program
C:\Program Files\whInstal

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OuterinfoDisplayIcon
HKEY_LOCAL_MACHINE\SOFTWARE\OuterinfoInstallDirectory