Wnwb

Wnwb is a search hijacker that tracks browsing habits in order to display ads. It can also install other functionally separate programs without adequate notice and consent.0

General information:

Malware Name: Wnwb
Malware Type: Adware
Company Name: Wnwb
Company URL: http://wnwb.cn/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Wnwb Company provides us the Wnwb. The company claims that the product does not show any pop up ads and also does not collect any personal information from user. The software is free to download.

Spyware Description:

Wnwb is a search hijacker that tracks browsing habits in order to display ads. It can also install other functionally separate programs without adequate notice and consent.0

Characteristics/Symptoms:

    -> It tracks browsing habits in order to display ads. -> It installs other functionally separate programs without adequate notice and consent. -> It changes the behavior of the IE. -> Displays ads from relative Chinese sites.0

Additional information might be found here:

google Search at Google for Wnwb
bing Search at Bing for Wnwb
yahoo Search at Yahoo for Wnwb

Processes Running:

wnwb.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\wnwb\wnwbmenu.gif 4896 GIF Image
C:\Program Files\wnwb\yy_user1.txt 302 Text Document
C:\Program Files\wnwb\yy_user2.txt 319 Text Document

Folder information Created after Installation:

Folder Location
C:\Program Files\wnwb

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\TypeLib\{3EC4916F-51B5-48F8-B601-DBB0CBF87B49}\1.0\0\win32
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\TypeLib\{3EC4916F-51B5-48F8-B601-DBB0CBF87B49}\1.0\FLAGS
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\TypeLib\{3EC4916F-51B5-48F8-B601-DBB0CBF87B49}\1.0\HELPDIR