Free Fireworks Screensaver

Free Fireworks Screensaver is an adware bundler that installs several other software’s with itself Adware-SaveNow,Adware-WhenUSearch (WhenU) and the adware that it installs with itself shows advertising and deceptive warnings.

General information:

Malware Name:Free Fireworks Screensaver
Malware Type:Adware Bundler
Company Name:Desktop-XP
Company URL:http://www.desktop-xp.com/
Threat Level:Low Risk
Operating System:WIN XP
Installation Type:Installed through EXE
Operation:Time of After Installation

Company Description:

Desktop-XP provides you the software Free Fireworks Screensaver that is really something magical! Just put it on your desktop and you will immediately be immersed into the atmosphere of a real holiday! Celebrate Christmas, Halloween, the Fourth of July, etc. and have your own spectacular fireworks show. It has exciting high-quality images and provides you variety of environments and thrilling transition effects. You can immerse yourself in the atmosphere of a real holiday.

Spyware Description:

Free Fireworks Screensaver is an adware bundler that installs several other software’s with itself Adware-SaveNow,Adware-WhenUSearch (WhenU) and the adware that it installs with itself shows advertising and deceptive warnings.

Characteristics/Symptoms:

    -> It installs several other software’s with itself like Adware-SaveNow,Adware-WhenUSearch (WhenU). -> The adware that it installs with itself shows advertising and deceptive warnings.

Additional information might be found here:

googleSearch at Google for Free Fireworks Screensaver
bingSearch at Bing for Free Fireworks Screensaver
yahooSearch at Yahoo for Free Fireworks Screensaver

Processes Running:

Free Fireworks Screensaver.scr

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Documents and Settings\All Users\Start Menu\Programs\Free Fireworks Screensaver\Visit home page.lnk636Shortcut
C:\WINDOWS\system32\Free Fireworks Screensaver.html2581Firefox Document
desktop \Free Fireworks Screensaver.lnk592Shortcut

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\All Users\Start Menu\Programs\Free Fireworks Screensave

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Free Fireworks Screensaver_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Free Fireworks Screensaver_is1Changed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Free Fireworks Screensaver_is1SlowInfoCache