|
Adw.Web-Nexus.WebNexusAdServer Adware Information
| Name: |
Adw.Web-Nexus.WebNexusAdServer |
| Category: |
Adware |
| Alias: |
- Alias: VX2, Binet, ABetterInternet, StopPop, stop-popup-ads-now.com, My PanicButton |
| Advice: |
Remove |
| Risk: |
Moderate Risk
Moderate threats may profile users online habits or broadcast data back to a server with 'opt-out' permission. In most cases this type of threat is more along the lines of commercial type adware that offer a premium service in exchange for tracking your user online performance. |
| Description:
|
Web Nexus is a small adware program. It will monitor your web browsing, and then deliver related advertising in an Internet Explorer window.
Web Nexus is typically installed as part of a bundled installation, usually called by another installer package. The installer file is self-contained has no built in confirmation so when installed as part so a bundle will go easily undetected. The entire installation is small in size and can easily go undetected.
Web Nexus delivers advertising content via pop-up or pop-under of a standard Internet Explorer browser window, or via slide-up window. The window is branded as Web Nexus by putting a small link at the bottom of the page.
The installation has a small impact to the system adding a minimum number of files and making few registry changes. The installation copies files to the windows System32 folder and then runs a process to hide the new files. It then makes the needed registry entries to run the program on startup.
Web Nexus tracks computer usage and web surfing behavior of the users computer. The program does not collect personally identifiable user information. As stated on the company website it will collect information and index it with the use of a random generated number. The company may then share that information. Web Nexus states they will not share any personally identifiable information.
Web Nexus Ad Server may be removed by visiting http://www.web-nexus.net/uninstall.php.
|
| Signatures:
|
process: rtdr.exe: MD5 Hash: 0c05ff84e37d5dd5713...
process: docdqax.exe: MD5 Hash: f4fe6a71c124322a2f9...
process: unruaz.exe: MD5 Hash: 0c05ff84e37d5dd5713...
process: sdksdp.exe: MD5 Hash: 60f5343fef0ebbb0b04...
process: rtdr.exe: MD5 Hash: 60f5343fef0ebbb0b04...
process: rtdr.exe: MD5 Hash: 60f5343fef0ebbb0b04...
process: tadu.exe: MD5 Hash: 60f5343fef0ebbb0b04...
process: mynexus.exe: MD5 Hash: 1f930b1bf93bb2a22eb...
process: f480343.exe: MD5 Hash: 60f5343fef0ebbb0b04...
process: adcomplusanalytic.exe: MD5 Hash: 40f3f8ee6cb44749657...
process: adcom9788.exe: MD5 Hash: 9516f5bb62f74051248...
process: f287843.exe: MD5 Hash: 2c10db62a34b74bfd32...
process: analytic.exe: MD5 Hash: 5749b3851677bf1a04d...
process: installer216.exe: MD5 Hash: 3776cb405188e938c9b...
process: f1512718.exe: MD5 Hash: 884d003da6d4a79e47c...
process: f838390.exe: MD5 Hash: 39cf3f7a081542c3a54...
process: webnexus.exe: MD5 Hash: 27cc053638af42cd7c8...
process: f1792375.exe: MD5 Hash: 39cf3f7a081542c3a54...
process: pkypoa.exe: MD5 Hash: 39cf3f7a081542c3a54.. |
| Type: |
Adware - |
Top Adware Visited Pages:
Adw.WinSoftware.WinAntiSpyware - 541 visits
ClickSpring.PuritySCAN.Downloader - 398 visits
DMCast - Alias: Desktop Media Cast - 169 visits
RBot.schvost - Alias: WORM_RBOT.CAU - 102 visits
WhenU.SaveNow - Alias: SAVE!, SaveNow, WhenU.SaveNow, WhenUSaveNow - 79 visits
Adw.FreePcScan.SpywareSlayer - 69 visits
Seekmo Search Assistant - 65 visits
ABetterInternet.Transponder.Ceres - Alias: Ceres - 65 visits
HelpExpress - Alias: Adware.HelpExpress - 61 visits
TopRebates.RebateNation - Alias: Adware:WebRebates.D - 55 visits
Random Adware Pages:
XLocator - Alias: Winlocator
Mass IM
Zeno Search
Trojan.virtual-ie.MsMovies
SearchSeekFind
BHO Combrepl
Cassandra
Slagent - Alias: mslagent
Adstart - Alias: localFilemove, Adware:Adstart.H
ABetterInternet - Alias: VX2, Binet, ABetterInternet, StopPop, stop-popup-ads-now.com, My PanicButton
|
