Deep Space Screensaver 2.5a
Deep Space Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web
browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
General information:
| Malware Name: |
Deep Space Screensaver 2.5a |
| Malware Type: |
Adware Bundler |
| Company Name: |
Always Great Software, Inc |
| Company URL: |
http://www.alwaysgreat.com/
|
| Threat Level: |
Elevated Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Always Great Software, Inc provides you the software Deep Space Screensaver 2.5a that contains images of nebulae, globular clusters, and galaxies. Many, taken by the Hubble Space Telescope, are stunning and beautiful. The Hubble can view these distant
objects with far greater detail than was ever possible from even the largest ground-based telescopes. Some of the images in this screensaver show a distant body as viewed from both the Hubble and a ground-based telescope to show the contrast in detail.
Spyware Description:
Deep Space Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web
browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Characteristics/Symptoms:
-> It installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). -> Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet
is an adware program that associates non-existent domain names with sponsored content.
Additional information might be found here:
Processes Running:
Deep Space.scr
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\NewDotNet\readme.html |
6273 |
HTML Document |
| C:\Program Files\NewDotNet\uninstall5_64.exe |
49664 |
Application |
| C:\Program Files\Save\ACM.dll |
516472 |
Application Extension |
Folder information Created after Installation:
| Folder Location |
| C:\WINDOWS\LastGoo |
| C:\WINDOWS\LastGood\IN |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Always Great Software, Inc.\Deep Space |
Data1 |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Always Great Software, Inc.\Deep Space |
Data2 |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\TypeLib\{DF901432-1B9F-4F5B-9E56-301C553F9095} |
|
