|
Xware Browser Hijacker Information
| Name: |
Xware |
| Category: |
Browser Hijacker |
| Advice: |
Remove |
| Risk: |
Moderate Risk
Moderate threats may profile users online habits or broadcast data back to a server with 'opt-out' permission. In most cases this type of threat is more along the lines of commercial type adware that offer a premium service in exchange for tracking your user online performance. |
| Description:
|
Xware is a BHO that changes your Trusted Zone in IE
Xware is a BHO that adds xxsware.com to your Trusted Zone. Some traffic include:
OPEN TCP 0.0.0.0:0 0.0.0.0:0 Success 0 E:Dumpxware.exe:1808
CONNECT TCP 0.0.0.0:1046 213.158.119.29:80 Success E:Dumpxware.exe:1808
RECEIVE TCP 192.168.1.11:1046 213.158.119.29:80 Success 333 E:Dumpxware.exe:1808
|
| Signatures:
|
process: xware.exe: MD5 Hash: e9ca4dde899fb65d50d.. |
| Type: |
Browser Hijacker - |
Top Browser Hijacker Visited Pages:
SuperSpider - Alias: Network Security Guard, Melcosoft - 318 visits
Spyass.com - 61 visits
Tubby - Alias: MakeMeSearch, CoolWebSearch.Tubby, Spyware.Arau, Trojan.Win32.StartPage.ih, Trojan.StartPage-FJ - 52 visits
CoolWebSearch - Alias: CWS, Cool Web Serach, CoolWwwSearch - 50 visits
CrackSpider - Alias: Troj/Favadd-D - 49 visits
SecurityToolbar.DesktopScam - 45 visits
Paytime - 40 visits
Trojan.StartPage - Alias: SearchCentral - 37 visits
Search3 Hijacker - 30 visits
SBSoft - 30 visits
Random Browser Hijacker Pages:
Americlicks
InstaFinder - Alias: Vista
Winshow - Alias: CWS.Winshow
topnetsearch
OmegaSearch - Alias: Omegasearch.com Prosearching.com. Search200.com. Mysearchnow.com. Searchexe.com
GoHip
Paytime
EUniverse Updater - Alias: WUpdate, eUniverse Flowgo toolbar, eUniverse SirSearch, SearchUpgrader, Search Upgrader
GreatSearch
Adw.CWS.Hotoffers
|