Emsisoft Malware-Info
Name: Adware.Win32.Tyra Banks Bikini and Lingerie Screen Saver
Risklevel: Elevated Risk
Company: White Paw Products - http://www.sexy-screen-savers.com/
Description:
Tyra Banks Bikini and Lingerie Screen Saver is an adware bundler that installs NewDotNet with itself. NewDotNet is an adware program that associates non-existent domain names with sponsored content. When an end-user enters a keyword into a browser address bar or attempts to resolve a mistaken or non-existent URL, the adware redirects the user to a sponsored page. It also installs Clspring GW that is a kind of Trojan .
Removal instructions for Adware Tyra Banks Bikini and Lingerie Screen Saver:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Tyra Banks Bikini and Lingerie Screen Saver.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- It installs NewDotNet and Clspring GW with itself.
- NewDotNet is an adware program that associates non-existent domain names with sponsored content. When an end-user enters a keyword into a browser address bar or attempts to resolve a mistaken or non-existent URL, the adware redirects the user to a sponsored page. Clspring GW is a kind of Trojan.
Installation: Installed through EXE
Process: Tyra Banks Bikini and Lingerie.scr
Screenshots:
Used folders:
- C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo
- C:\Program Files\webHancer
- C:\Program Files\webHancer\Programs
- C:\Program Files\whInstall
- C:\Program Files\Outerinfo
- C:\Program Files\Outerinfo\Cache
Used files:
- C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-1417001333-706699826-725345543-500\9509fba7-4692-439e-a4c6-9005a56f43f3
[388 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\CREDHIST
[24 Bytes] System file - C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo\Uninstall.lnk
[1569 Bytes] Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo\Terms.lnk
[614 Bytes] Shortcut - C:\Program Files\Outerinfo\Terms.rtf
[18031 Bytes] Rich Text Format - C:\Program Files\Outerinfo\outerinfo.ico
[34494 Bytes] Icon - C:\WINDOWS\whInstaller.ini
[357 Bytes] Configuration Settings - C:\Program Files\Outerinfo\Outerinfo.exe
[593920 Bytes] Application - C:\Program Files\Outerinfo\OuterinfoUpdate.exe
[88064 Bytes] Application - C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-1417001333-706699826-725345543-500\Preferred
[24 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1417001333-706699826-725345543-500\a18ca4003deb042bbee7a40f15e1970b_98b5dcf8-e0ab-45f8-b3c2-daf0f5ab643a
[54 Bytes] System file - C:\WINDOWS\webhdll.dll
[40960 Bytes] Application Extension - C:\WINDOWS\whInstaller.exe
[32768 Bytes] Application - C:\WINDOWS\system32\Outerinfo-1199.exe
[963680 Bytes] Application - C:\WINDOWS\system32\sstunst3.exe
[45056 Bytes] Application - C:\WINDOWS\system32\Tyra Banks Bikini and Lingerie.ibx
[1232917 Bytes] IBX File - C:\Program Files\Outerinfo\Outerinfo.dll
[172032 Bytes] Application Extension - C:\Program Files\webHancer\Programs\whSurvey.exe
[143360 Bytes] Application - C:\WINDOWS\whAgent.inf
[4884 Bytes] Setup Information - C:\Program Files\whInstall\Webhdll.dll
[40960 Bytes] Application Extension - C:\WINDOWS\system32\Tyra Banks Bikini and Lingerie.scr
[573440 Bytes] Screen Saver - C:\Program Files\webHancer\Programs\license.txt
[7572 Bytes] Text Document - C:\Program Files\webHancer\Programs\readme.txt
[1533 Bytes] Text Document - C:\Program Files\webHancer\Programs\sporder.dll
[11264 Bytes] Application Extension - C:\Program Files\webHancer\Programs\whAgent.exe
[172032 Bytes] Application - C:\Program Files\webHancer\Programs\whAgent.ini
[211 Bytes] Configuration Settings - C:\Program Files\webHancer\Programs\whiehlpr.dll
[106496 Bytes] Application Extension - C:\Program Files\whInstall\readme.txt
[1533 Bytes] Text Document - C:\Program Files\whInstall\Sporder.dll
[11264 Bytes] Application Extension - C:\Program Files\Outerinfo\OiUninstaller.exe
[141064 Bytes] Application - C:\Program Files\whInstall\WhAgent.exe
[172032 Bytes] Application - C:\Program Files\whInstall\whAgent.inf
[4884 Bytes] Setup Information - C:\Program Files\whInstall\whAgent.ini
[17 Bytes] Configuration Settings - C:\Program Files\whInstall\whiehlpr.dll
[106496 Bytes] Application Extension - C:\Program Files\whInstall\whInstaller.exe
[32768 Bytes] Application - C:\Program Files\whInstall\whInstaller.ini
[760 Bytes] Configuration Settings - C:\Program Files\whInstall\WhSurvey.exe
[143360 Bytes] Application - C:\Program Files\Outerinfo\OinUninstall.exe
[66824 Bytes] Application - C:\Program Files\whInstall\license.txt
[7572 Bytes] Text Document
Additional information might be found here:
Search
at Google for
Adware Tyra Banks Bikini and Lingerie Screen Saver
Search at Bing for
Adware Tyra Banks Bikini and Lingerie Screen Saver
Search
at Yahoo for
Adware Tyra Banks Bikini and Lingerie Screen Saver
How can I protect myself from Adware Tyra Banks Bikini and Lingerie Screen Saver?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here

























