Home Malware Programs Trojans Winshow

Winshow

Posted: March 28, 2006

Threat Metric

Threat Level: 9/10
Infected PCs: 3
First Seen: July 24, 2009
OS(es) Affected: Windows

Winshow is a pop-up opener implemented as an Internet Explorer Browser Helper Object, controlled by 00hq.com. The origin is currently unknown. When a targeted word or phrase is spotted in a web site you are viewing in Internet Explorer, Winshow may open a pop-up advert. So far adverts have been served from 00hq.com and 8ad.com. Can download and execute arbitrary unsigned code from its controlling server, as a self-updating feature.

Aliases

WORM_NUCRP.GEN [TrendMicro]Adware.Iefeats [Symantec]Troj/SpyDldr-C [Sophos]Adware/SearchAid [Panda]a variant of Win32/TrojanDownloader.Agent.BQ [NOD32]TrojanDownloader:Win32/WinShow [Microsoft]Generic Downloader.am [McAfee]Trojan.Win32.Malware.1 [K7AntiVirus]not-a-virus:AdWare.Win32.LinkOptimizer.a [Ikarus]W32/SpyDldr.C!tr.dldr [Fortinet]Trojan-Downloader.Win32.Agent.td [F-Secure]Downloader.Agent.td [eWido]Win32/Winshow.IT [eTrust-Vet]Suspicious File [eSafe]Trojan.Feat.7 [DrWeb]
More aliases (28)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



ipue32.exe File name: ipue32.exe
Size: 35.44 KB (35447 bytes)
MD5: ad4f06f5f5c41ecca564eb7291d4c115
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

Related Posts

Loading...