Jesse McCartney Screen Saver

Jesse McCartney Screen Saver is an adware bundler that installs the Spyware-WebHancer and Outerinfo with itself. Spyware-WebHancer that monitors Web sites visited and sends this information to a remote server. Outerinfo may also display advertisements.

General information:

Malware Name: Jesse McCartney Screen Saver
Malware Type: Adware Bundler
Company Name: White Paw Products
Company URL: http://www.sexy-screen-savers.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

White Paw Products provides you the software Jesse McCartney Screen Saver that shows you lots of free full-size, high quality Jesse McCartney photos. Including: Candid shots, Magazine pictorials, Stage performances, Sexy shirtless poses, many more. The screensaver also includes: Sticky Note feature for custom on-screen messaging; Use any image as your desktop wallpaper; 100 screen transition effects.

Spyware Description:

Jesse McCartney Screen Saver is an adware bundler that installs the Spyware-WebHancer and Outerinfo with itself. Spyware-WebHancer that monitors Web sites visited and sends this information to a remote server. Outerinfo may also display advertisements.

Characteristics/Symptoms:

    -> It installs the Spyware-WebHancer and Outerinfo with itself. -> Spyware-WebHancer that monitors Web sites visited and sends this information to a remote server. Outerinfo may also display advertisements.

Additional information might be found here:

google Search at Google for Jesse McCartney Screen Saver
bing Search at Bing for Jesse McCartney Screen Saver
yahoo Search at Yahoo for Jesse McCartney Screen Saver

Processes Running:

Jesse McCartney.scr

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\whInstall\Sporder.dll 11264 Application Extension
C:\Program Files\whInstall\Webhdll.dll 40960 Application Extension
C:\WINDOWS\whInstaller.exe 32768 Application

Folder information Created after Installation:

Folder Location
C:\Program Files\Outerinf
C:\Program Files\Outerinfo\Cach

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo NoRepair
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webHancer Agent DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Outerinfo