IWon CoPilot

IWon CoPilot has a search function and provides search results for paid advertisers. It adds a third-party utility bar to the web browser. It also change the browser and shows the advertisements.0

General information:

Malware Name: IWon CoPilot
Malware Type: Toolbar
Company Name: iWon
Company URL: http://companyinfo.iwon.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through ActiveX
Operation: Time of After Installation

Company Description:

iWon combines world-class search and full-portal functionality from industry-leading sources, with one of the Internet's largest guaranteed cash giveaways. iWon is a wholly-owned subsidiary of IAC Search & Media (NASDAQ: IACI). It keeps our information strictly confidential. It knows exactly where iWon, a property of IAC Search & Media stands on its downloadable products. It respects the property of others.

Spyware Description:

IWon CoPilot has a search function and provides search results for paid advertisers. It adds a third-party utility bar to the web browser. It also change the browser and shows the advertisements.0

Characteristics/Symptoms:

    -> Tracks browsing habits -> Displays third-party advertising on the computer -> Changes browser -> It has a search function and provides search results for paid advertisers0

Additional information might be found here:

google Search at Google for IWon CoPilot
bing Search at Bing for IWon CoPilot
yahoo Search at Yahoo for IWon CoPilot

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\iWon\iWonBar\1.bin\IWONPLUGIN0PROXY.CLASS 321 CLASS File
C:\Program Files\iWon\iWonBar\Cache\006CD09E 78 File
C:\Program Files\iWon\iWonBar\Cache\006CE03A.bmp 2400 Bitmap Image

Folder information Created after Installation:

Folder Location
C:\Program Files\iWon
C:\Program Files\iWon\Installr

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstalliWonCoPilot UrlInfoAbout
HKEY_LOCAL_MACHINE SOFTWAREiWoniWonBar Visible
HKEY_LOCAL_MACHINE SOFTWAREiWoniWonBar uninstallurl