|
KeenValue PerfectNav Browser Hijacker Information
| Name: |
KeenValue PerfectNav |
| Category: |
Browser Hijacker |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
The PerfectNav Internet Explorer spyware software is designed to redirect your URL typing errors to PerfectNav's web page.
PerfectNav is bundled with the Free Ad Supported version of Kazaa Media Desktop 2.6. Likely to be found in software supplied by eUniverse sites, such as thunderdownloads.com, myfreecursors.com, cursorzone.com and mycoolscreen.com. Likely to slow performance of Internet Explorer. Can download and execute arbitrary code as directed by its controlling server, as an update feature.
When you use PerfectNav it is easy to crash your Internet Explorer (iexplore.exe) by any malformed URL like any thing you like: ? /?. Run "iexplore.exe ?" or type "?" in your IE address bar and simply get the error message:
"An error has occurred in Internet Explorer. Internet Explorer will now close. If you continue to experience problems, please restart your computer."
KeenValue.updmgr is an updater for eUniverse's products, such as KeenValue, IncrediFind and PerfectNav. KeenValue.updmgr runs in the background, connects to update2.thunderdownloads.com (12.129.205.220) looking for updates.
|
| Signatures:
|
process: keenvalue.exe: MD5 Hash: ...
process: killkeenvalue.exe: MD5 Hash: ...
process: kwm.exe: MD5 Hash: ...
process: senduninstallinfo.exe: MD5 Hash: ...
process: tipb.exe: MD5 Hash: bf947f714bc71f2252e...
process: tipb.exe: MD5 Hash: ...
process: setup_perfectnav.exe: MD5 Hash: 4499fd7cb7b4a964371...
process: updmgr.exe: MD5 Hash: bfef3c07b3e25b7cdeb...
process: keenvalue.exe: MD5 Hash: 074580839f2b674c683...
process: killkeenvalue.exe: MD5 Hash: 50d5ea2d7048a605a2e...
process: kwm.exe: MD5 Hash: 29b81f4db0c722d011e...
process: senduninstallinfo.exe: MD5 Hash: b1b45ff49d6ef897e88.. |
| Type: |
Browser Hijacker - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well. |
Top Browser Hijacker Visited Pages:
SuperSpider - Alias: Network Security Guard, Melcosoft - 323 visits
Spyass.com - 65 visits
Tubby - Alias: MakeMeSearch, CoolWebSearch.Tubby, Spyware.Arau, Trojan.Win32.StartPage.ih, Trojan.StartPage-FJ - 54 visits
CoolWebSearch - Alias: CWS, Cool Web Serach, CoolWwwSearch - 50 visits
CrackSpider - Alias: Troj/Favadd-D - 49 visits
SecurityToolbar.DesktopScam - 45 visits
Paytime - 40 visits
Trojan.StartPage - Alias: SearchCentral - 37 visits
Search3 Hijacker - 30 visits
SBSoft - 30 visits
Random Browser Hijacker Pages:
Adw.Melkosoft.SuperSpider
ClickToSearch - Alias: BestPhrases, Adware.Getup
Commander Toolbar
Secret Crush
Xware
Winbed Unknown
CWS.AboutBlank
Viewpornkey.com
PeopleOnPage - Alias: PeopleOnPage, POP!, POP! World, POP! Dating, SysAI, AI, AdIntelligence, PeopleOnPage Bar, POP, Envol
Paytime
|
