Doggone Doggies Screen Saver
Doggone Doggies Screen Saver is an adware bundler that installs several adware with itself like Adware-NS.dldr and Spyware-WebHancer. Spyware-WebHancer modifies windows LSP stack so that it can monitor network activity and search keywords being transmitted
silently.
General information:
Malware Name: |
Doggone Doggies Screen Saver |
Malware Type: |
Adware Bundler |
Company Name: |
White Paw Products |
Company URL: |
http://www.sexy-screen-savers.com/
|
Threat Level: |
Moderate Risk |
Operating System: |
WIN XP |
Installation Type: |
Installed through EXE |
Operation: |
Time of After Installation |
Company Description:
White Paw Products provides you the software Doggone Doggies Screen Saver that features many different photos of man s best friend - the loyal and lovable dog. The images vary from humorous to peaceful to thought provoking. All dog lovers will want
this screen saver on their desktop. Download it for yourself or for a friend. The screensaver also features: Sticky Note feature for custom on-screen message; Use any image as your own custom wallpaper; Special artistic effects; plus lots more.
Spyware Description:
Doggone Doggies Screen Saver is an adware bundler that installs several adware with itself like Adware-NS.dldr and Spyware-WebHancer. Spyware-WebHancer modifies windows LSP stack so that it can monitor network activity and search keywords being transmitted
silently.
Characteristics/Symptoms:
-> It installs several adware with itself like Adware-NS.dldr and Spyware-WebHancer. -> Spyware-WebHancer modifies windows LSP stack so that it can monitor network activity and search keywords being transmitted silently.
Additional information might be found here:
Processes Running:
Doggone Doggies.scr
File information Created after Installation:
File Location |
Size (Bytes) |
Type |
C:\Program Files\whInstall\WhSurvey.exe |
253952 |
Application |
C:\WINDOWS\webhdll.dll |
40960 |
Application Extension |
C:\WINDOWS\whAgent.inf |
4884 |
Setup Information |
Folder information Created after Installation:
Folder Location |
C:\Documents and Settings\[USER]\Application Data\Microsoft\Crypto\RSA\S-1-5-21-682003330-2025429265-2147039463-50 |
C:\Program Files\Outerinf |
Registry information Created after Installation:
Main Registry Key |
Sub Registry Key |
Key Value Name |
HKEY_CURRENT_USER |
\Software\White Paw Products\Doggone Doggies |
|
HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\CLSID\{c900b400-cdfe-11d3-976a-00e02913a9e0} |
|
HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\CLSID\{c900b400-cdfe-11d3-976a-00e02913a9e0}\InprocServer32 |
ThreadingModel |