RECOMMENDATION!
ANTI-MALWARE TESTED
LATEST VICTORIES:
February 2012:
1. place for Emsisoft Internet Security
500 samples by virusovnet!
comss.ru
November 2011:
1. place for Emsisoft Anti-Malware
MRG Flash-Tests in 2011!
malwareresearchgroup.com
April 2010:
Best reactive scan - 60 products
98.72% in VB100 april test!
Virus Bulletin VB100
April 2010:
1. place for Emsisoft Anti-Malware
99.8% in MRG scanner test #23!
malwareresearchgroup.com
September 2009:
Best detection in all categories!
COM! Magazine test (German)
August 2009:
1. place: Emsisoft Anti-Malware
99.9% in static detection test of
PC Security Labs
REVIEWS/AWARDS
100% Wildlist detection
and 0 false alerts!
Best in test of comss.ru (Russian)
Emsisoft Anti-Malware was
awarded for its outstanding
total performance.
MRG: Best result in test!
Best static detection!
PC Magazine:
"Near-Perfect Protection:
It blocked every single one of the
samples the moment each one tried
to execute, scoring a perfect
10 of 10 points."
Best Free Trojan Scanner!
"Our favorite malware-masher:
Emsisoft Anti-Malware!"
SecuritySoftwareZone best rating
Tucows 5 cows!
"In terms of worms and spyware,
but also trojans, Emsisoft Anti-Malware can hardly be beaten."
ZDNet best rating
Emsisoft Anti-Malware with
best rating at Softpedia.com
MajorGeeks.com
Editor's Pick
Softpedia.com
Reviewer's pick
SoftWorld.com
Editor's Pick
FreeSharewareDepot.com
Editor's Pick
Recommended by:
Free Programs
EMSISOFT PRODUCTS
Emsisoft Malware-Info
Name: Adware.Win32.Angel Art Screensaver 2.5a
Risklevel: Elevated Risk
Company: Always Great Software, Inc - http://www.alwaysgreat.com/
Description:
Angel Art Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Removal instructions for Adware Angel Art Screensaver 2 5a:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Angel Art Screensaver 2 5a.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- It installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net).
- Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Installation: Installed through EXE
Process: Angel Art.scr
Screenshots:
Used folders:
- C:\Program Files\Always Great Software\Angel Art
- C:\Program Files\Free Offers from Always Great Software
- C:\Program Files\Save
- C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU
- C:\Program Files\NewDotNet
- C:\WINDOWS\LastGood
- C:\WINDOWS\LastGood\INF
Used files:
- C:\WINDOWS\LastGood\INF\oem1.inf
[0 Bytes] Setup Information - C:\Program Files\NewDotNet\newdotnet7_48.dll
[610304 Bytes] Application Extension - C:\Program Files\NewDotNet\readme.html
[6254 Bytes] HTML Document - C:\Program Files\NewDotNet\uninstall5_64.exe
[49664 Bytes] Application - C:\Program Files\NewDotNet\uninstall7_48.exe
[183808 Bytes] Application - desktop+\Free Animated Desktop Wallpaper.lnk
[1610 Bytes] Shortcut - desktop+\Free Dolphins ScreenSaver.lnk
[1624 Bytes] Shortcut - desktop+\3D Snowy Cottages ScreenSaver - Free.lnk
[1659 Bytes] Shortcut - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1
[46908 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
[410133 Bytes] System file - C:\Program Files\NewDotNet\newdotnet5_64.dll
[221184 Bytes] Application Extension - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\7735880A01E3F94F763761958A7A8191
[132 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\7735880A01E3F94F763761958A7A8191
[1219 Bytes] System file - C:\WINDOWS\LastGood\INF\oem1.PNF
[0 Bytes] Precompiled Setup Information - C:\WINDOWS\system32\Angel Art.msf
[2653998 Bytes] MSF File - C:\WINDOWS\system32\Angel Art.scr
[475136 Bytes] Screen Saver - C:\WINDOWS\system32\FSScrCtl.exe
[241664 Bytes] Application - C:\WINDOWS\system32\rkinstaller.exe
[114688 Bytes] Application - C:\WINDOWS\system32\sporder.dll
[8464 Bytes] Application Extension - C:\WINDOWS\system32\CatRoot2\tmp.edb
[1056768 Bytes] EDB File - C:\WINDOWS\NDNuninstall5_64.exe
[49664 Bytes] Application - C:\WINDOWS\NDNuninstall7_48.exe
[183808 Bytes] Application - C:\Documents and Settings\[USER]\Local Settings\Temp\angart25.exe
[3212130 Bytes] Application - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1
[120 Bytes] System file - C:\Program Files\Always Great Software\Angel Art\UNINSTAL.EXE
[153088 Bytes] Application - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
[124 Bytes] System file - C:\Program Files\Always Great Software\Angel Art\remove.exe
[61440 Bytes] Application - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\WhenU.com Website.url
[76 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\dolphinico.ico
[3262 Bytes] Icon - C:\Program Files\Free Offers from Always Great Software\dolphinico.url
[67 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\INSTALL.LOG
[5755 Bytes] Text Document - C:\Program Files\Free Offers from Always Great Software\snowycottageico.ico
[3262 Bytes] Icon - C:\Program Files\Free Offers from Always Great Software\snowycottageico.url
[71 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\wfallsaw.ico
[2238 Bytes] Icon - C:\Program Files\Free Offers from Always Great Software\wfallsaw.url
[68 Bytes] Internet Shortcut - C:\Program Files\Save\ACM.dll
[516472 Bytes] Application Extension - C:\Program Files\Save\ffext.mod
[12814 Bytes] MOD File - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU SaveNow.url
[97 Bytes] Internet Shortcut - C:\Program Files\Always Great Software\Angel Art\INSTALL.LOG
[2061 Bytes] Text Document - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Uninstall Instructions.lnk
[1400 Bytes] Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU Save.url
[94 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Customer Support.lnk
[1400 Bytes] Shortcut - C:\Program Files\Save\store.db
[103 Bytes] Data Base File - C:\Program Files\Save\save.htm
[135229 Bytes] HTML Document - C:\Program Files\Save\Save.exe
[803184 Bytes] Application - C:\Program Files\Save\save.db
[111907 Bytes] Data Base File - C:\Program Files\Save\save.cch
[5301966 Bytes] CCH File - C:\Program Files\Save\SaveUninst.exe
[118200 Bytes] Application
Additional information might be found here:
Search
at Google for
Adware Angel Art Screensaver 2 5a
Search at Bing for
Adware Angel Art Screensaver 2 5a
Search
at Yahoo for
Adware Angel Art Screensaver 2 5a
How can I protect myself from Adware Angel Art Screensaver 2 5a?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here
