Home Malware Programs Adware Money Viking Ads

Money Viking Ads

Posted: November 23, 2015

Threat Metric

Ranking: 11,016
Threat Level: 2/10
Infected PCs: 6,581
First Seen: November 20, 2015
Last Seen: October 1, 2023
OS(es) Affected: Windows

Money Viking is an ad-oriented Web plugin that is developed and distributed by the notorious company SuperWeb LLC. This program is not the right tool to optimize your online shopping. In fact, the problems with it begin with the applied delivery methods. SuperWeb LLC has chosen this name for the product intentionally as this way it is very hard to find information about it online. It is difficult to locate the official website of Money Viking, and even if you manage to do it, you will be surprised to find that the download button doesn't work. This adware may not travel alone in the cyberspace but in bundles with other programs. As a result, some PC users may install it against their will.

The changes that Money Viking may make in the browsers are easy to spot. As soon as you launch Google Chrome, Mozilla Firefox or Internet Explorer, you may see a different homepage than the one you have set. The SuperWeb LLC software may make suspicious search platforms as starting sites in order to boost incoming Web traffic to its partners. The way of functioning of these unreliable search engines is simple – they may display sponsored links in the first positions. The experts recommend ignoring such pages for the sake of maintaining the security of the PC. For the same reason, you should not click on the numerous pop-ups, banners and interstitial ads that Money Viking inserts. The problem with them is that they may redirect to third-party pages with unverified legitimacy. Of course, it is possible the mere existence of unrequested commercial materials to cause annoyance because they come in large quantities. The fact that some ads may contain multimedia elements may be the reason for sporadic freezes or crashes of Web clients, so you should consider deleting the adware.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{085A374E-5218-4F48-A95F-353B3F2E2E4A}{305be14e-7080-4992-9e2d-f6cfa0054a3b}{B0F58F05-575F-4861-90CD-7203FB0088E0}{c7c5384f-d9e9-4db1-8c72-135ecccbc571}{d73575f0-7efa-4328-ab3a-88ea8f4292b5}{E156391B-B638-45B5-9A0A-326F29DE17EA}{F5B714D5-4181-4C86-848B-80A3538C40A4}File name without pathhttps_moneyviking-a.akamaihd.net_0.localstoragehttps_moneyviking-a.akamaihd.net_0.localstorage-journalmoneyviking-a.akamaihd[1].xmlHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\moneyviking-a.akamaihd.netSOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\moneyviking-a.akamaihd.netSoftware\Microsoft\Internet Explorer\Approved Extensions\{A8007792-8F54-4B9C-BB73-04187702A6AE}Software\Microsoft\Internet Explorer\DOMStorage\moneyviking-a.akamaihd.netSOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\moneyviking-a.akamaihd.netSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{c7c5384f-d9e9-4db1-8c72-135ecccbc571}SOFTWARE\MoneyVikingSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{c7c5384f-d9e9-4db1-8c72-135ecccbc571}SOFTWARE\Wow6432Node\MoneyVikingSYSTEM\ControlSet001\services\Service Mgr MoneyVikingSYSTEM\ControlSet001\services\Update Mgr MoneyVikingSYSTEM\ControlSet002\services\Service Mgr MoneyVikingSYSTEM\ControlSet002\services\Update Mgr MoneyVikingSYSTEM\CurrentControlSet\services\Service Mgr MoneyVikingSYSTEM\CurrentControlSet\services\Update Mgr MoneyVikingHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Money Viking

Additional Information

The following directories were created:
%PROGRAMFILES%\Money Viking%PROGRAMFILES(x86)%\Money Viking%temp%\Money Viking
The following URL's were detected:
moneyviking.net
Loading...