White House Mambo Screensaver

White House Mambo Screensaver is an adware bundler that installs several other software’s with itself like Adware-SaveNow (WhenU), Adware-WhenUSearch (WhenU) and Adware-Url.gen and the adware that it installs with itself shows advertising and deceptive warnings.

General information:

Malware Name: White House Mambo Screensaver
Malware Type: Adware Bundler
Company Name: RI Soft Systems, Inc
Company URL: http://www.risoftsystems.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

RI Soft Systems, Inc provides you the software White House Mambo Screensaver that is the hilarious follow-up to the Clinton Blues is a veritable dance fest featuring The Prez himself singing and dancing with each of the ladies in his past and present. This software uses the latest technologies to provide a cool animated screensaver with synchronized music that scales to any monitor size/resolution.

Spyware Description:

White House Mambo Screensaver is an adware bundler that installs several other software’s with itself like Adware-SaveNow (WhenU), Adware-WhenUSearch (WhenU) and Adware-Url.gen and the adware that it installs with itself shows advertising and deceptive warnings.

Characteristics/Symptoms:

    -> It installs several other software’s with itself like Adware-SaveNow, Adware-WhenUSearch (WhenU) and Adware-Url.gen. -> The adware that it installs with itself shows advertising and deceptive warnings.

Additional information might be found here:

google Search at Google for White House Mambo Screensaver
bing Search at Bing for White House Mambo Screensaver
yahoo Search at Yahoo for White House Mambo Screensaver

Processes Running:

White House Mambo.scr

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\White House Mambo\LICENSE.TXT 7704 Text Document
C:\Program Files\White House Mambo\UNINSTAL.EXE 162304 Application
C:\Program Files\White House Mambo\remove.exe 61440 Application

Folder information Created after Installation:

Folder Location
C:\Program Files\White House Mamb

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\White House Mambo Screensaver
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\White House Mambo Screensaver DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\White House Mambo Screensaver UninstallString