Advent Calendar Screensaver 1.1

Advent Calendar Screensaver 1.1 is an adware bundler that installs several other software’s with itself Adware-SaveNow,Adware-WhenUSearch (WhenU) , NDotNet. and the adware that it installs with itself shows advertising and deceptive warnings.

General information:

Malware Name: Advent Calendar Screensaver 1.1
Malware Type: AdwareBundler
Company Name: R.I. Soft Systems
Company URL: http://www.risoftsystems.com/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

R.I. Soft Systems provides you the software Advent Calendar Screensaver 1.1 that puts a virtual advent calendar onto your desktop, counting down the days until 25 December. The scene opens with a peaceful winter s evening on a snow-covered mountain. A Christmas tree takes pride of place in the centre of the scene.

Spyware Description:

Advent Calendar Screensaver 1.1 is an adware bundler that installs several other software’s with itself Adware-SaveNow,Adware-WhenUSearch (WhenU) , NDotNet. and the adware that it installs with itself shows advertising and deceptive warnings.

Characteristics/Symptoms:

    -> It installs several other software’s with itself like Adware-SaveNow,Adware-WhenUSearch (WhenU) and NDotNet. -> The adware that it installs with itself shows advertising and deceptive warnings.

Additional information might be found here:

google Search at Google for Advent Calendar Screensaver 1.1
bing Search at Bing for Advent Calendar Screensaver 1.1
yahoo Search at Yahoo for Advent Calendar Screensaver 1.1

Processes Running:

Advent Calendar.scr

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\All Users\Start Menu\Programs\Advent Calendar Screensaver\Mail-In Order Form.lnk 622 Shortcut
C:\Program Files\Advent Calendar Screensaver\BuyNow.url 88 Internet Shortcut
C:\WINDOWS\Advent Calendar.scr 1239616 Screen Saver

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\All Users\Start Menu\Programs\Advent Calendar Screensave

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advent Calendar Screensaver DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advent Calendar Screensaver DisplayVersion
HKEY_LOCAL_MACHINE \SOFTWARE\RI Soft Systems\Advent Calendar AffiliateId