|
FreeScratchAndWin Browser Plug-in Information
| Name: |
FreeScratchAndWin |
| Category: |
Browser Plug-in |
| Advice: |
Remove |
| Risk: |
Moderate Risk
Moderate threats may profile users online habits or broadcast data back to a server with 'opt-out' permission. In most cases this type of threat is more along the lines of commercial type adware that offer a premium service in exchange for tracking your user online performance. |
| Description:
|
FreeScratchAndWin is an IE Browser Helper Object that comes with a web-based 'scratchcards' game.
FreeScratchAndWin is installed by ActiveX drive-by download in affiliate pages which are redirected to by AdsCPM, the advertising network company who run FreeScratchAndWin.
FreeScratchAndWin/Beta: a version of the software that didn't seem to work fully, but was distributed anyway.
FreeScratchAndWin/v5: most common variant of the software. Includes a homepage- and search-hijacker pointed at xzoomy.com.
FreeScratchAndWin/v6: now renamed 'Free Scratch Cards'. Instead of the xzoomy hijack this now bundles lop/Rnd. Like lop/Rnd, it uses random filenames for its files, and cannot be detected by the script at this site.
|
| Signatures:
|
process: xtzdjknl.exe: MD5 Hash: 4ca0c7ff9f847a5f30b...
process: xtzdjknl.exe: MD5 Hash: be2cbd13eee96406f00...
process: xujykafs.exe: MD5 Hash: 3a652aa4f96e14e55f8...
process: xujykafs.exe: MD5 Hash: c59f15f220ba8141d3a...
process: xustmryz.exe: MD5 Hash: f318b76281c0ce0af99...
process: xustmryz.exe: MD5 Hash: c71fe9f7b563644994c...
process: fsw.exe: MD5 Hash: eba14e224e9735eca2b...
process: support.exe: MD5 Hash: b902012d8f6bb800b7c...
process: updater.exe: MD5 Hash: 398dc96561194369263...
process: install.exe: MD5 Hash: c9e0e6e9c4c497d96c0...
process: cahqtpxz.exe: MD5 Hash: 49838fb1d851d3e2014...
process: crjdjwcu.exe: MD5 Hash: 4b3200a45bec55379c1.. |
| Type: |
Browser Plug-in - Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance. |
Top Browser Plug-in Visited Pages:
3721.com Chinese Keywords - Alias: 3721.com Chinese Keywords browser Spyware - 75 visits
Sexxxpassport Plug-in - Alias: Sexxxpassport.com, SEXXXPASSPORT - 52 visits
FavoriteMan - Alias: TrojanDownloader.Win32.Rameh, Windows Help 4 Smart Browsing, F1Organizer, ATPartners - 43 visits
Netster SmartBrowse - Alias: Netster SmartBrowse Toolbar - 40 visits
MapQuest Toolbar - 39 visits
My Way Speedbar - Alias: MyWayToolbar, MyWay Search Bar - 39 visits
Trojan.BHO.NameShifter.T - 36 visits
Kugoo - 35 visits
EZSearch - Alias: ezSearching, ctavp - 34 visits
Esyndicate - Alias: Esyndicate.BHO - 32 visits
Random Browser Plug-in Pages:
BHO.Msudpb
Trojan.BHO.IEHlprObj
Trojan.BHO.NameShifter.V
Trojan.BHO.NameShifter.L
BHO.CSApp
Trojan.BHO.NameShifter.AQ
Flyswat - Alias: Adware.Flyswat
Trojan.BHO.NameShifter.N
Comet Cursor
EZ-Toolbar
|
