Catherine Bell Sex-E Screen Saver
Catherine Bell Sex-E Screen Saver is an adware bundler that installs Spyware-WebHancer with itself. Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites
back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. It also installs Clspring GW that is a kind of Trojan.
General information:
| Malware Name: |
Catherine Bell Sex-E Screen Saver |
| Malware Type: |
Adware Bundler |
| Company Name: |
White Paw Products |
| Company URL: |
http://www.sexy-screen-savers.com/
|
| Threat Level: |
Elevated Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
White Paw Products provides you the software Catherine Bell Sex-E Screen Saver that free screen saver features Catherine in lingerie, bikinis, and other revealing outfits. If you have admired her natural beauty on TV, you will appreciate her even
more after viewing this free screen saver. This screen saver features Catherine in large high-resolution full-screen images. It shows you many different pictures and poses.
Spyware Description:
Catherine Bell Sex-E Screen Saver is an adware bundler that installs Spyware-WebHancer with itself. Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites
back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. It also installs Clspring GW that is a kind of Trojan.
Characteristics/Symptoms:
-> It installs Spyware-WebHancer with itself and Clspring GW with itself. -> Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back
to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. Clspring GW is a kind of Trojan.
Additional information might be found here:
Processes Running:
Catherine Bell Sex-E.scr
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\[USER]\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1417001333-706699826-725345543-500\a18ca4003deb042bbee7a40f15e1970b_98b5dcf8-e0ab-45f8-b3c2-daf0f5ab643a |
54 |
System file |
| C:\Program Files\Outerinfo\OiUninstaller.exe |
141064 |
Application |
| C:\Program Files\Outerinfo\Outerinfo.dll |
172032 |
Application Extension |
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\webHancer\Program |
| C:\Program Files\whInstal |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webHancer Agent |
DisplayName |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webHancer Agent |
UninstallString |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\whSurvey |
|
