|
WinAd Client Spyware Information
| Name: |
WinAd Client |
| Category: |
Spyware |
| Alias: |
- Alias: ISTProtect, Win32.IstBar |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
WinAd is added to the system as a result of a program called "Yo Mama Osama". WinAd will display itself by opening a new browser window with advertising for copy DVD software.
Wnad is bundled with downloads from Twisted Humor's website (twistedhumor.com).
|
| Signatures:
|
process: osama.exe: MD5 Hash: d1b2d94199d852af78f...
process: wnad.exe: MD5 Hash: 5e9e3fb0c9e147dde2a...
process: wnad.exe: MD5 Hash: be33b147001f3af0a2a...
process: wnad.exe: MD5 Hash: ...
process: WinClt.exe: MD5 Hash: 801dd269989be0ae77c...
process: WinClt.exe: MD5 Hash: 1644ca25c64880c26b1...
process: orhhsy.exe: MD5 Hash: 4fafd0b7b185a8eb731...
process: WinClt.exe: MD5 Hash: f76f204c39cc3cee2d5...
process: winclt.exe: MD5 Hash: b39244160e8c74943ff.. |
| Type: |
Spyware - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well. |
Top Spyware Visited Pages:
IEPlugin - Alias: IMIServer IEPlugin, Webplugin, BHO3Lib, ExplWWW, IExpl, MimarSinan, Win Server, winobject, TrojanDow - 84 visits
webHancer - Alias: Customer Companion, Webhancer Customer Companion, SpeedRank - 53 visits
Spyware.SearchAssistant - Alias: Troj/StartPa-EI - 50 visits
PowerReg Scheduler - 46 visits
007.msnnames - Alias: access.ocx, jokes.ocx, StopLiteCtrl, StopLite, 007installer - 44 visits
Aureate - Alias: Aureate Spy, Radiate - 39 visits
VX2.LocalNRD - Alias: LocalNRD - 38 visits
CWS.Cassandra - 37 visits
C2.Lop - Alias: C2 Media, Lop, LopAdvert, MP3Search, MpAdvert, TrojanClicker.Win32.Rotarran - 35 visits
Stealth Web Page Recorder v. 1.1 - 32 visits
Random Spyware Pages:
Unclassified.Spyware.Bundles
Spyware.Adsrve - Alias: IEDriver
Unclassified.Spyware.A
Banker.TU - Alias: TrojanSpy:Win32/Banker.TU
00Sub7_20
Unclassified.Spyware.47
Spyware.Winpipe
Spyware.SearchAssistant - Alias: Troj/StartPa-EI
VX2.Buddy
IST.Protector - Alias: ISTProtect, Win32.IstBar
|
