CashOn

CashOn is a free, ad-based product which installs itself into Internet Explorer or Netscape browser. It ads a bar which has a series of links into browser which gives quite a bit of information about each web page that user visit.0

General information:

Malware Name: CashOn
Malware Type: Toolbar
Company Name: Mediagate
Company URL: http://cashon.co.kr/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Mediagate provides you the software CashOn.

Spyware Description:

CashOn is a free, ad-based product which installs itself into Internet Explorer or Netscape browser. It ads a bar which has a series of links into browser which gives quite a bit of information about each web page that user visit.0

Characteristics/Symptoms:

    -> It may be installed without adequate notice and consent, often though exploits. -> It uses aggressive, deceptive advertising. -> It may be bundled with other adware. -> Hijacks Web Browser Settings.0

Additional information might be found here:

google Search at Google for CashOn
bing Search at Bing for CashOn
yahoo Search at Yahoo for CashOn

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\CashOn\icons\ico_y79.Ico 1758 Icon
C:\Program Files\CashOn\icons\pop_right_show.bmp 1948 Bitmap Image
C:\Program Files\CashOn\icons\pop_right_title.bmp 25016 Bitmap Image

Folder information Created after Installation:

Folder Location
C:\Program Files\CashOn
C:\Program Files\CashOn\bin

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCacheWindows Driver for Cashontool SlowInfoCache
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Windows Driver for Cashontool
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Windows Driver for Cashontool Changed