|
ABetterInternet.Respondmiter Adware Information
| Name: |
ABetterInternet.Respondmiter |
| Category: |
Adware |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
Respondmiter is an Internet Explorer Browser Helper Object that monitors web page requests and data entered into forms, sending this information to its home server, and opens pop-up advertisement windows.
Respondmiter also collects and sends personal information and sends it to its server.
Respondmiter (VX2) also has the capability to update itself and install other software. There are two variants of this parasite with different file and internal names, but both work identically.
While the user is browsing the Web, it will pop up advertisements based on what page is being visited, what's being searched for, how quickly the user is surfing, etc. Transponder's ad-displaying algorithm appears to weight the occurrence of ads in such a way that they appear to come from the page(s) being visited. VX2 opens pop-up advertisements depending on targeted URLs being browsed, targeted terms being entered into search engines and other forms, and how much browsing is being done - the software tries to hide by not opening advertisements when little is happening.
From the Vendor:
“The software goes along with the user of the software as they are surfing around the web and builds reports on the activity.
The software monitors the click stream activity of the consumer and communicates with servers.
The software monitors some activity of the PC and communicates with servers.”
Information Gathered by VX2
Upon its first load, VX2.dll will look for a file in your Windows directory called oeminfo.ini. If present, this file contains information about your computer provided by the OEM--who you bought it from, serial #/etc., processor and configuration, tech support info, and maybe your name. (IIRC, this information is displayed if you go to Start > Settings > ControlPanel > System and view the first tab.)
The software covertly collects all sorts of information about your Web surfing habits, including lists of Web sites you visit (and even sites you've visited before installing their software), any terms you enter into a search engine, and contents of online forms--including "secure" forms using SSL encryption(!). The company has the audacity to claim that this is done "in order to save you the time and trouble of submitting such information to us yourself". It also stores cookies to persistently identify you across sessions.
The software collects and transmits your full name name and e-mail address as used by the Outlook mail client. It also transmits back a laundry list of information about your system, which is described in more detail below. Finally, the software transmits details about your interaction with the software.
The software also includes an auto-update capability with the stated purpose of updating not only the VX2 spyware itself, but also installing additional third-party programs, including additional spyware.
VX2 is distributed with unknown third-party software, including AudioGalaxy Satellite. VX2 was also distributed under the name NetPal by netpalnow.com, but the software now available there is the newer NetPal spyware threat which isn't the same.
|
| Signatures:
|
process: offerp01.exe: MD5 Hash: c21646209f5c27ddb84...
process: satmat.exe: MD5 Hash: f1bbd427b1ec064981c...
process: offerp01.exe: MD5 Hash: ...
process: satmat.exe: MD5 Hash: ...
process: abetterinternet.exe: MD5 Hash: 8a4cc13f2fac594895a.. |
| Type: |
Adware - Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance. |
Top Adware Visited Pages:
Adw.WinSoftware.WinAntiSpyware - 536 visits
ClickSpring.PuritySCAN.Downloader - 395 visits
DMCast - Alias: Desktop Media Cast - 167 visits
RBot.schvost - Alias: WORM_RBOT.CAU - 101 visits
WhenU.SaveNow - Alias: SAVE!, SaveNow, WhenU.SaveNow, WhenUSaveNow - 77 visits
Adw.FreePcScan.SpywareSlayer - 65 visits
Seekmo Search Assistant - 63 visits
ABetterInternet.Transponder.Ceres - Alias: Ceres - 63 visits
HelpExpress - Alias: Adware.HelpExpress - 59 visits
TopRebates.RebateNation - Alias: Adware:WebRebates.D - 54 visits
Random Adware Pages:
Cram Toolbar
SurfAccuracy - Alias: SAcc
SeekSeek - Alias: DefaultSearch
CashFiesta AdBar - Alias: CashFiesta AdBar
AdRoar
Trojan.ATPSocks - Alias: WIN32.SMALL.N Proxy, Socks
Popuper - Alias: Troj/Puper-E
ZeroPopUpBar - Alias: ZeroPopUp Companion ToolBar, TellFriend, Zero PopUp killer ToolBar
SearchIt Toolbar - Alias: SearchIt
CasinoRewards
|
