Brad Pitt Screen Saver

Brad Pitt Screen Saver is an adware bundler that installs the Spyware-WebHancer and Outerinfo with itself. Spyware-WebHancer that monitors Web sites visited and sends this information to a remote server. Outerinfo may also display advertisements.

General information:

Malware Name: Brad Pitt Screen Saver
Malware Type: Adware Bundler
Company Name: White Paw Products
Company URL: http://www.sexy-screen-savers.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

White Paw Products provides you the software Brad Pitt Screen Saver that shows you lots of free full-size, high quality Brad Pitt photos. Including: Candid shots, Magazine pictorials, Movie scenes, Sexy shirtless poses, many more.

Spyware Description:

Brad Pitt Screen Saver is an adware bundler that installs the Spyware-WebHancer and Outerinfo with itself. Spyware-WebHancer that monitors Web sites visited and sends this information to a remote server. Outerinfo may also display advertisements.

Characteristics/Symptoms:

    -> It installs the Spyware-WebHancer and Outerinfo with itself. -> Spyware-WebHancer that monitors Web sites visited and sends this information to a remote server. Outerinfo may also display advertisements.

Additional information might be found here:

google Search at Google for Brad Pitt Screen Saver
bing Search at Bing for Brad Pitt Screen Saver
yahoo Search at Yahoo for Brad Pitt Screen Saver

Processes Running:

Brad Pitt.scr

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\whInstall\Sporder.dll 11264 Application Extension
C:\Program Files\whInstall\Webhdll.dll 40960 Application Extension
C:\WINDOWS\whInstaller.exe 32768 Application

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinf
C:\Program Files\Outerinf

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo Publisher
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo UninstallString
HKEY_LOCAL_MACHINE \SOFTWARE\Outerinfo REFID