NewWeb
|
Description:
|
Adware
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Thursday, June 12, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Adware
Software that is displaying pop-up/pop-under windows containing advertisements when the primary user interface is not visible or displayed advertisements are not related to the product.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SUPPRIMER SPYWARE »
Geographical Distribution of Threat "NewWeb"
Threat Info
View All
Detected Items
- Detected Files:
%SYSDIR%\winsc.dll
MD5: CEC08EA7B16436F194BEE3B4EC8FE2C4 Size:89861
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%sysdir%\winsc.dll
- Files by CLSID or Name
CLSID=9ACEEE30-143F-471A-AA45-72B061FE7D60
CLSID=9ACEEE31-1440-471B-AA46-72B061FE7D61
CLSID=E2218499-2FD4-4EED-A94A-7F0B9C6E300E
CLSID=EBBC6E6D-7B65-46be-B509-86CED2D17876
CLSID=0D8CA512-282E-4E3F-8970-F5EE879AF7FC
CLSID=566CB5F7-D9FA-4B01-8A1A-168F706CBE41
CLSID=86DC8694-AACC-4CE6-B8EC-A75DEEDA698D
CLSID=C5668031-4BDE-43D4-8766-8E9AAC16C56E
CLSID=DED96F80-2B97-407C-8E09-D7233448753F
- Registry Keys
HKLM\SOFTWARE\SCIntruder
HKCR\AppID\SCIntruder.DLL
HKCR\AppID\{35A69597-0E2A-4100-A394-C6F6FC2535B9}
HKCR\NewWebController.Intruder
HKCR\NewWebController.Intruder.1
HKCR\SCIntruder.DocumentEventsHandler
HKCR\SCIntruder.DocumentEventsHandler.1
HKCR\SCIntruder.Magazines
HKCR\SCIntruder.Magazines.1
HKCR\SCIntruder.Service
HKCR\SCIntruder.Service.1
HKCR\SCIntruder.Settings
HKCR\SCIntruder.Settings.1
HKCR\SCIntruder.WindowEventsHandler
HKCR\SCIntruder.WindowEventsHandler.1
HKCR\TypeLib\{5CD75223-E010-4BE9-9027-7A53533EA4F6}
HKLM\SOFTWARE\SCIntruder
«
Go to Software Database
