Alley Baggett Sex-E Screen Saver

Alley Baggett Sex-E Screen Saver is an adware bundler that installs Spyware-WebHancer with itself. Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. It also installs Clspring GW that is a kind of Trojan.

General information:

Malware Name: Alley Baggett Sex-E Screen Saver
Malware Type: Adware Bundler
Company Name: White Paw Products
Company URL: http://www.sexy-screen-savers.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

White Paw Products provides you the software Alley Baggett Sex-E Screen Saver that shows you free sexy photos of this curvaceous, Playboy lingerie model and Entertainment Tonight correspondent. One of today s most popular and prolific nude models, Alley has been voted as one of the most beautiful ladies in the world by publications such as AskMen.com. This screensaver features many different images of Alley provocatively posed in bikinis, lingerie and other revealing outfits.

Spyware Description:

Alley Baggett Sex-E Screen Saver is an adware bundler that installs Spyware-WebHancer with itself. Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. It also installs Clspring GW that is a kind of Trojan.

Characteristics/Symptoms:

    -> It installs Spyware-WebHancer with itself and Clspring GW with itself. -> Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. Clspring GW is a kind of Trojan.

Additional information might be found here:

google Search at Google for Alley Baggett Sex-E Screen Saver
bing Search at Bing for Alley Baggett Sex-E Screen Saver
yahoo Search at Yahoo for Alley Baggett Sex-E Screen Saver

Processes Running:

Alley Baggett Sex-E.scr

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\Outerinfo\Outerinfo.exe 593920 Application
C:\Program Files\Outerinfo\outerinfo.ico 34494 Icon
C:\WINDOWS\webhdll.dll 40960 Application Extension

Folder information Created after Installation:

Folder Location
C:\Program Files\webHancer\Program
C:\Program Files\whInstal

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo DisplayIcon
HKEY_LOCAL_MACHINE \SOFTWARE\Outerinfo InstallDirectory