RECOMMENDATION!
ANTI-MALWARE TESTED
LATEST VICTORIES:
February 2012:
1. place for Emsisoft Internet Security
500 samples by virusovnet!
comss.ru
November 2011:
1. place for Emsisoft Anti-Malware
MRG Flash-Tests in 2011!
malwareresearchgroup.com
April 2010:
Best reactive scan - 60 products
98.72% in VB100 april test!
Virus Bulletin VB100
April 2010:
1. place for Emsisoft Anti-Malware
99.8% in MRG scanner test #23!
malwareresearchgroup.com
September 2009:
Best detection in all categories!
COM! Magazine test (German)
August 2009:
1. place: Emsisoft Anti-Malware
99.9% in static detection test of
PC Security Labs
REVIEWS/AWARDS
100% Wildlist detection
and 0 false alerts!
Best in test of comss.ru (Russian)
Emsisoft Anti-Malware was
awarded for its outstanding
total performance.
MRG: Best result in test!
Best static detection!
PC Magazine:
"Near-Perfect Protection:
It blocked every single one of the
samples the moment each one tried
to execute, scoring a perfect
10 of 10 points."
Best Free Trojan Scanner!
"Our favorite malware-masher:
Emsisoft Anti-Malware!"
SecuritySoftwareZone best rating
Tucows 5 cows!
"In terms of worms and spyware,
but also trojans, Emsisoft Anti-Malware can hardly be beaten."
ZDNet best rating
Emsisoft Anti-Malware with
best rating at Softpedia.com
MajorGeeks.com
Editor's Pick
Softpedia.com
Reviewer's pick
SoftWorld.com
Editor's Pick
FreeSharewareDepot.com
Editor's Pick
Recommended by:
Free Programs
EMSISOFT PRODUCTS
Emsisoft Malware-Info
Name: Adware.Win32.Book of Mormon Screensaver 2.5a
Risklevel: Elevated Risk
Company: Always Great Software, Inc - http://www.alwaysgreat.com/
Description:
Book of Mormon Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Removal instructions for Adware Book of Mormon Screensaver 2 5a:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Book of Mormon Screensaver 2 5a.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- It installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net).
- Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Installation: Installed through EXE
Process: Book of Mormon.scr
Screenshots:
Used folders:
- C:\Program Files\Free Offers from Always Great Software
- C:\WINDOWS\LastGood
- C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU
- C:\Program Files\NewDotNet
- C:\Program Files\Always Great Software\Book of Mormon
- C:\WINDOWS\LastGood\INF
- C:\Program Files\Save
Used files:
- C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
[124 Bytes] System file - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU SaveNow.url
[97 Bytes] Internet Shortcut - desktop+\3D Snowy Cottages ScreenSaver - Free.lnk
[1659 Bytes] Shortcut - desktop+\Free Animated Desktop Wallpaper.lnk
[1610 Bytes] Shortcut - desktop+\Free Dolphins ScreenSaver.lnk
[1624 Bytes] Shortcut - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1
[46908 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
[410133 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\7735880A01E3F94F763761958A7A8191
[1219 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1
[120 Bytes] System file - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\WhenU.com Website.url
[76 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\7735880A01E3F94F763761958A7A8191
[132 Bytes] System file - C:\WINDOWS\LastGood\INF\oem1.inf
[0 Bytes] Setup Information - C:\WINDOWS\LastGood\INF\oem1.PNF
[0 Bytes] Precompiled Setup Information - C:\WINDOWS\system32\CatRoot2\tmp.edb
[1056768 Bytes] EDB File - C:\WINDOWS\NDNuninstall5_64.exe
[49664 Bytes] Application - C:\WINDOWS\NDNuninstall7_48.exe
[183808 Bytes] Application - C:\WINDOWS\system32\FSScrCtl.exe
[241664 Bytes] Application - C:\WINDOWS\system32\Book of Mormon.msf
[2497530 Bytes] MSF File - C:\WINDOWS\system32\sporder.dll
[8464 Bytes] Application Extension - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Customer Support.lnk
[1400 Bytes] Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU Save.url
[94 Bytes] Internet Shortcut - C:\WINDOWS\system32\Book of Mormon.scr
[475136 Bytes] Screen Saver - C:\WINDOWS\system32\rkinstaller.exe
[114688 Bytes] Application - C:\Program Files\Free Offers from Always Great Software\INSTALL.LOG
[11658 Bytes] Text Document - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Uninstall Instructions.lnk
[1400 Bytes] Shortcut - C:\Program Files\Always Great Software\Book of Mormon\INSTALL.LOG
[2161 Bytes] Text Document - C:\Program Files\Always Great Software\Book of Mormon\remove.exe
[61440 Bytes] Application - C:\Program Files\Always Great Software\Book of Mormon\UNINSTAL.EXE
[153088 Bytes] Application - C:\Program Files\Save\store.db
[105 Bytes] Data Base File - C:\Program Files\Free Offers from Always Great Software\dolphinico.url
[67 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Local Settings\Temp\bomorm25.exe
[3059838 Bytes] Application - C:\Program Files\Free Offers from Always Great Software\snowycottageico.ico
[3262 Bytes] Icon - C:\Program Files\Free Offers from Always Great Software\snowycottageico.url
[71 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\wfallsaw.ico
[2238 Bytes] Icon - C:\Program Files\Free Offers from Always Great Software\wfallsaw.url
[68 Bytes] Internet Shortcut - C:\Program Files\Save\save.db
[111907 Bytes] Data Base File - C:\Program Files\Save\SaveUninst.exe
[118200 Bytes] Application - C:\Program Files\Free Offers from Always Great Software\dolphinico.ico
[3262 Bytes] Icon - C:\Program Files\NewDotNet\newdotnet5_64.dll
[221184 Bytes] Application Extension - C:\Program Files\Save\Save.exe
[803184 Bytes] Application - C:\Program Files\Save\save.cch
[5301966 Bytes] CCH File - C:\Program Files\Save\ffext.mod
[12814 Bytes] MOD File - C:\Program Files\Save\ACM.dll
[516472 Bytes] Application Extension - C:\Program Files\NewDotNet\uninstall5_64.exe
[49664 Bytes] Application - C:\Program Files\NewDotNet\readme.html
[6273 Bytes] HTML Document - C:\Program Files\NewDotNet\newdotnet7_48.dll
[610304 Bytes] Application Extension - C:\Program Files\Save\save.htm
[135229 Bytes] HTML Document
Additional information might be found here:
Search
at Google for
Adware Book of Mormon Screensaver 2 5a
Search at Bing for
Adware Book of Mormon Screensaver 2 5a
Search
at Yahoo for
Adware Book of Mormon Screensaver 2 5a
How can I protect myself from Adware Book of Mormon Screensaver 2 5a?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here
