Home Malware Programs Adware Adware.YouShopping

Adware.YouShopping

Posted: February 11, 2014

Threat Metric

Ranking: 19,542
Threat Level: 2/10
Infected PCs: 119
First Seen: February 11, 2014
Last Seen: December 9, 2024
OS(es) Affected: Windows


YouShopping Screenshot 1Adware.YouShopping is adware that may show annoying random advertisements on the desktop of the computer when the PC user is visiting shopping related and social networking websites. The pop-up advertisements shown by Adware.YouShopping may give PC users numerous discount coupons, sales, deals and offers. If the computer user clicks on the pop-up ads delivered by Adware.YouShopping, it may unwillingly reroute him to suspicious websites that may be commercial. Adware.YouShopping may be installed into Internet Explorer, Mozilla Firefox and Google Chrome Web browser while the computer user is installing freeware from the Internet. After installation on the computer system, Adware.YouShopping may change the default browser settings and modify the default start page, search engine and a new tab page with a an unreliable website. Adware.YouShopping may trace the PC user's surfing activity and send and use collected data for unknown marketing purposes.

YouShopping Screenshot 2YouShopping Screenshot 3YouShopping Screenshot 4

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\youshopping\youshopping-bg.exe File name: youshopping-bg.exe
Size: 777.08 KB (777088 bytes)
MD5: 33286ef0950c4a3fdfc9771f2e4fdac7
Detection count: 50
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\youshopping
Group: Malware file
Last Updated: February 11, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110311671139}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311671139}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311671139}

Additional Information

The following directories were created:
%APPDATA%\YouShopping%ProgramFiles%\YouShopping%ProgramFiles(x86)%\YouShopping%USERPROFILE%\AppData\LocalLow\YouShopping
Loading...