Amazing Lighthouses Screensaver 2.5a

Amazing Lighthouses Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

General information:

Malware Name: Amazing Lighthouses Screensaver 2.5a
Malware Type: Adware Bundler
Company Name: Always Great Software, Inc
Company URL: http://www.alwaysgreat.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Always Great Software, Inc provides you the software Amazing Lighthouses Screensaver 2.5a that shows beautiful and relaxing images of lighthouses overlooking both the Atlantic and the Pacific Oceans. See an amazing variety of architectural styles. Many of these lighthouses are now historical landmarks. Most still shine brightly while others have dimmed with the years. This screen saver contains 35 amazing images. The evaluation version shows all of the images available in the full, registered version.

Spyware Description:

Amazing Lighthouses Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

Characteristics/Symptoms:

    -> It installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). -> Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

Additional information might be found here:

google Search at Google for Amazing Lighthouses Screensaver 2.5a
bing Search at Bing for Amazing Lighthouses Screensaver 2.5a
yahoo Search at Yahoo for Amazing Lighthouses Screensaver 2.5a

Processes Running:

Amazing Lighthouses.scr

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Customer Support.lnk 1400 Shortcut
C:\WINDOWS\LastGood\INF\oem1.inf unknown Setup Information
desktop \Free Dolphins ScreenSaver.lnk 1624 Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\Always Great Software\Amazing Lighthouse
C:\Program Files\NewDotNe

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\New.net HelpLink
HKEY_LOCAL_MACHINE \SOFTWARE\New.net Tag
HKEY_LOCAL_MACHINE \SOFTWARE\WhenUSave db_stamp_rs