Images of Washington DC Screensaver 2.5a
Images of Washington DC Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response
to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
General information:
| Malware Name: |
Images of Washington DC Screensaver 2.5a |
| Malware Type: |
Adware Bundler |
| Company Name: |
Always Great Software, Inc |
| Company URL: |
http://www.alwaysgreat.com/
|
| Threat Level: |
Elevated Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Always Great Software, Inc provides you the software Images of Washington DC Screensaver 2.5a that symbolizes the values that make the United States of America the land of the free and the home of the brave. This screensaver shows 25 high-quality
images of the White House, the Washington Monument, the Lincoln Memorial, Congress, the Jefferson Memorial, the Vietnam War Memorial, the Korean War Memorial, and more. Relax and ponder the principles upon which this nation was founded as you view
these stunning scenes.
Spyware Description:
Images of Washington DC Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response
to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Characteristics/Symptoms:
-> It installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). -> Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet
is an adware program that associates non-existent domain names with sponsored content.
Additional information might be found here:
Processes Running:
Images of Washington DC.scr
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\7735880A01E3F94F763761958A7A8191 |
1219 |
System file |
| C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Customer Support.lnk |
1400 |
Shortcut |
| C:\Program Files\NewDotNet\uninstall5_64.exe |
49664 |
Application |
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\Always Great Software\Images of Washington D |
| C:\WINDOWS\LastGood\IN |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\WhenUSave |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\WhenUSave |
acm_rs |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\WhenUSave |
dbc_chunks_rs |
