Zango Messenger

Zango lets user enjoy all the free online games and free downloadable games at : arcade, board

General information:

Malware Name: Zango Messenger
Malware Type: Adware
Company Name: 180solutions, Inc
Company URL:
Threat Level: High
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Browser Restart.

Company Description:

Zango lets user enjoy all the free online games and free downloadable games at: arcade, board & card, word puzzles, mahjong and adventure games. Plus, we’ve got unlimited access to all the free music, videos, media sites and desktop applications that Zango has to offer!

Spyware Description:

Zango lets user enjoy all the free online games and free downloadable games at : arcade, board

Characteristics/Symptoms:

    -> Collects information about browsing -> Slows the Browser -> Communicates with the host server -> Changes default settings of the Browser -> Collects personal information -> Unlimited access to all free music, video0

Additional information might be found here:

google Search at Google for Zango Messenger
bing Search at Bing for Zango Messenger
yahoo Search at Yahoo for Zango Messenger

Processes Running:

em2.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\Zango Programs\Zango Messenger\header.gif 2055 GIF Image
C:\Program Files\Zango Programs\Zango Messenger\headerBackground.gif 235 GIF Image
C:\Program Files\Zango Programs\Zango Messenger\idle.dll 3072 Application Extension

Folder information Created after Installation:

Folder Location
C:\Program Files\Zango Programs
C:\Program Files\Zango Programs\Common

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionRun EasyMessage
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstall{482B0C04-67D0-4A96-B94F-660BC3D4363A} DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Zango Programs\Zango Messenger TARGETDIR