Surfing Spy

Posted: March 28, 2006 | Category: Spyware
Surfing Spy is a commercial malware product designed to record addresses of all the web sites visited in Internet Explorer and Netscape web browsers. Gathered data is saved into a file on a hard disk. The application must be manually installed. Surfing Spy automatically runs on every Windows startup. The following files were created in the system:

Surf Spy

Posted: March 28, 2006 | Category: Spyware
Surf Spy is a commercial malware application that records addresses of all user's visited web sites. It supports all popular modern web browsers. Gathered data is saved into encrypted and password-protected file, which can be silently sent to a configurable e-mail address. Surf Spy must be manually installed. It runs on every Windows startup and hides its active processes. The following files were created in the system:

Tiny Spy Agent

Posted: March 28, 2006 | Category: Keyloggers
Tiny Spy Agent is a commercial keylogger that tracks user activity, logs all keystrokes and records computer login names and passwords. Gathered data is saved on a hard disk. The application must be manually installed. Tiny Spy Agent secretly runs on every Windows startup. The following files were created in the system:

DreamAd

Posted: March 28, 2006 | Category: Adware
DreamAd is an illegal advertising application that continuously serves large amount of undesirable commercial advertisements. DreamAd can get into the computer from certain web sites. It also can be manually installed or come bundled with some ad-supported software. The spyware is able to update itself via the Internet. It silently runs on every Windows startup. The following files were created in the system:

JustFindIt

Posted: March 28, 2006 | Category: Browser Plugins
JustFindIt is a parasitical search toolbar for Internet Explorer. It sends search requests to certain web site and shows undesirable commercial advertisements. JustFindIt can be manually installed or may get into the computer along with some ad-supported software. The threat uses files with random names and therefore is quite difficult to completely disable. JustFindIt runs on every Windows startup. The following CLSID's were detected: HKEY..\..\ {CLSID Path}...

Affilred

Posted: March 28, 2006 | Category: Browser Hijackers
Affilred is a browser hijacker that blocks access to numerous web sites and sends a web browser to predefined Internet resources without asking for user permission. Affilred must be manually installed. The spyware automatically runs on every Windows startup. Affilred creates lots of files in different locations, so it is quite difficult to get rid of. The following files were created in the system:

MediaTicket

Posted: March 28, 2006 | Category: Adware
MediaTicket is an adware spyware that continuously shows unexpected commercial pop-up advertisements. The threat also affects Internet Explorer security by changing its Internet zone settings. MediaTicket can be manually installed or may get into the computer along with some ad-supported software. It automatically runs on every Windows startup. The following files were created in the system:

Findwhatever

Posted: March 28, 2006 | Category: Browser Hijackers
Findwhatever is a browser hijacker that periodically changes Internet Explorer default home page to many advertising web sites. Findwhatever doesn't have any harmful payload. It can silently get into the computer while visiting certain web pages. The spyware runs on every Windows startup. The following files were created in the system:

CDTray

Posted: March 28, 2006 | Category: Trojans
CDTray is a relatively simple trojan designed to annoy the user by repeatedly opening and closing the CD-ROM drive. The spyware consumes too many PC resources and therefore may severely degrade computer performance or even crash a PC. CDTray automatically runs on every Windows startup. The following files were created in the system:

Medload

Posted: March 28, 2006 | Category: Adware
Medload is an adware spyware that shows undesirable commercial pop-up advertisements, opens advertising web sites and installs main components of several dangerous adware threats. It also changes Internet Explorer security settings and creates multiple desktop shortcuts that lead to potentially unsafe web sites. Medload can get into the computer along with some ad-supported software. It also can be installed by certain spywares. Medload automatically runs on every Windows startup....

Locator

Posted: March 28, 2006 | Category: Browser Plugins
Locator is an additional Internet Explorer toolbar that provides a web search service and links to certain Internet resources. Locator changes web browser's default home and search pages without asking for user permission. Moreover, it can download from the Internet and run arbitrary files. The threat is able to silently update itself. Locator must be manually installed. It runs every time the user starts Internet Explorer. The following files were created in the system:

PSN

Posted: March 28, 2006 | Category: Browser Hijackers
PSN is a typical browser hijacker that changes Internet Explorer default home and search pages and modifies web browser security settings. The spyware must be manually installed. It automatically runs on every Windows startup and can update itself. The following files were created in the system:

SystemProcess

Posted: March 28, 2006 | Category: Adware
SystemProcess is a malicious adware spyware that shows unexpected commercial advertisements and modifies essential computer security settings. It also can download and install third-party advertising software without user knowledge and consent. SystemProcess can get into the computer along with some illegitimate ad-supported softwares. The following files were created in the system:

Exphook

Posted: March 28, 2006 | Category: Trojans
Exphook is a dangerous trojan that attempts to steal passwords, login names, credit card numbers, account details and other sensitive information the user enters into many fields of visited web sites. The spyware hooks Internet Explorer and tracks user Internet activity. Exphook transfers stolen data to some remote servers. It automatically runs on every Windows startup. The following files were created in the system:

Mailbancos

Posted: March 28, 2006 | Category: Worms
Mailbancos is an Internet worm that propagates by e-mail. It comes in HTML messages with embedded links that download and install a dangerous trojan, which steals passwords the user enters into many web forms. Mailbancos sends stolen data to its author by e-mail. The worm distributes malicious messages to all the contacts from the Windows Address Book. A typical e-mail is in Portuguese. The following files were created in the system:

Nometz

Posted: March 28, 2006 | Category: Viruses
Nometz is a macro virus that infects all opened Microsoft Word documents. The spyware modifies Microsoft Word essential macro security settings, hides certain menu options and disables some application components. Nometz copies infected documents to C:WindowsSystem directory, changes their extension to .jpg and silently uploads these files to a predetermined FTP server. Such virus behavior causes a disclosure of user sensitive information. After documents were successfully uploaded, the...

Clickbank

Posted: March 28, 2006 | Category: Adware
Clickbank, also known as FakeMessage, is an adware spyware that continuously shows fake Windows error messages. Once the user clicks on such a message, Clickbank opens a web site that attempts to install suspicious softwares. The threat must be manually installed. It automatically runs on every Windows startup. The following files were created in the system:

Envolo

Posted: March 28, 2006 | Category: Malware
Envolo is a malicious application that silently downloads and installs adware spywares. It also can update already installed pests. In some cases Envolo may severely degrade PC performance or even crash the computer due bugs in its code. The threat is bundled with some spywares and ad-supported software. It can also be manually installed. Envolo automatically runs on every Windows startup. The following files were created in the system:

Live Chat

Posted: March 28, 2006 | Category: Adware
Live Chat is an adware spyware that continuously shows fake warnings saying that "Windows Firewall detected suspicious network activity on you PC". These warnings offer to download certain "security" software. Once the user clicks on such a warning, Live Chat opens a predetermined advertising web site, which provides adware installs. The following files were created in the system:

MXTarget

Posted: March 28, 2006 | Category: Adware
MXTarget is an adware application that shows undesirable pop-up advertisements. The threat monitors user Internet activity and transfers gathered data to a predetermined remote server. MXTarget is bundled with several advertising-supported products. It works as an Internet Explorer add-on and therefore runs every time the user opens a web browser. The following files were created in the system: