Amazing Lighthouses Screensaver 2.5a

Amazing Lighthouses Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

General information:

Malware Name:Amazing Lighthouses Screensaver 2.5a
Malware Type:Adware Bundler
Company Name:Always Great Software, Inc
Company URL:http://www.alwaysgreat.com/
Threat Level:Elevated Risk
Operating System:WIN XP
Installation Type:Installed through EXE
Operation:Time of After Installation

Company Description:

Always Great Software, Inc provides you the software Amazing Lighthouses Screensaver 2.5a that shows beautiful and relaxing images of lighthouses overlooking both the Atlantic and the Pacific Oceans. See an amazing variety of architectural styles. Many of these lighthouses are now historical landmarks. Most still shine brightly while others have dimmed with the years. This screen saver contains 35 amazing images. The evaluation version shows all of the images available in the full, registered version.

Spyware Description:

Amazing Lighthouses Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

Characteristics/Symptoms:

    -> It installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). -> Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

Additional information might be found here:

googleSearch at Google for Amazing Lighthouses Screensaver 2.5a
bingSearch at Bing for Amazing Lighthouses Screensaver 2.5a
yahooSearch at Yahoo for Amazing Lighthouses Screensaver 2.5a

Processes Running:

Amazing Lighthouses.scr

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Customer Support.lnk1400Shortcut
C:\WINDOWS\LastGood\INF\oem1.infunknownSetup Information
desktop \Free Dolphins ScreenSaver.lnk1624Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\Always Great Software\Amazing Lighthouse
C:\Program Files\NewDotNe

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\New.netHelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\New.netTag
HKEY_LOCAL_MACHINE\SOFTWARE\WhenUSavedb_stamp_rs