RECOMMENDATION!
ANTI-MALWARE TESTED
LATEST VICTORIES:
February 2012:
1. place for Emsisoft Internet Security
500 samples by virusovnet!
comss.ru
November 2011:
1. place for Emsisoft Anti-Malware
MRG Flash-Tests in 2011!
malwareresearchgroup.com
April 2010:
Best reactive scan - 60 products
98.72% in VB100 april test!
Virus Bulletin VB100
April 2010:
1. place for Emsisoft Anti-Malware
99.8% in MRG scanner test #23!
malwareresearchgroup.com
September 2009:
Best detection in all categories!
COM! Magazine test (German)
August 2009:
1. place: Emsisoft Anti-Malware
99.9% in static detection test of
PC Security Labs
REVIEWS/AWARDS
100% Wildlist detection
and 0 false alerts!
Best in test of comss.ru (Russian)
Emsisoft Anti-Malware was
awarded for its outstanding
total performance.
MRG: Best result in test!
Best static detection!
PC Magazine:
"Near-Perfect Protection:
It blocked every single one of the
samples the moment each one tried
to execute, scoring a perfect
10 of 10 points."
Best Free Trojan Scanner!
"Our favorite malware-masher:
Emsisoft Anti-Malware!"
SecuritySoftwareZone best rating
Tucows 5 cows!
"In terms of worms and spyware,
but also trojans, Emsisoft Anti-Malware can hardly be beaten."
ZDNet best rating
Emsisoft Anti-Malware with
best rating at Softpedia.com
MajorGeeks.com
Editor's Pick
Softpedia.com
Reviewer's pick
SoftWorld.com
Editor's Pick
FreeSharewareDepot.com
Editor's Pick
Recommended by:
Free Programs
EMSISOFT PRODUCTS
Emsisoft Malware-Info
Name: Adware.Win32.Images of Washington DC Screensaver 2.5a
Risklevel: Elevated Risk
Company: Always Great Software, Inc - http://www.alwaysgreat.com/
Description:
Images of Washington DC Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Removal instructions for Adware Images of Washington DC Screensaver 2 5a:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Images of Washington DC Screensaver 2 5a.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- It installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net).
- Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Installation: Installed through EXE
Process: Images of Washington DC.scr
Screenshots:
Used folders:
- C:\WINDOWS\LastGood\INF
- C:\Program Files\Always Great Software\Images of Washington DC
- C:\Program Files\Free Offers from Always Great Software
- C:\Program Files\Save
- C:\Program Files\NewDotNet
- C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU
- C:\WINDOWS\LastGood
Used files:
- C:\Program Files\Save\Save.exe
[803184 Bytes] Application - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\7735880A01E3F94F763761958A7A8191
[1219 Bytes] System file - C:\Program Files\NewDotNet\uninstall5_64.exe
[49664 Bytes] Application - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Customer Support.lnk
[1400 Bytes] Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU Save.url
[94 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU SaveNow.url
[97 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Uninstall Instructions.lnk
[1400 Bytes] Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\WhenU.com Website.url
[76 Bytes] Internet Shortcut - desktop+\3D Snowy Cottages ScreenSaver - Free.lnk
[1659 Bytes] Shortcut - C:\Program Files\NewDotNet\readme.html
[6273 Bytes] HTML Document - desktop+\Free Dolphins ScreenSaver.lnk
[1624 Bytes] Shortcut - C:\WINDOWS\LastGood\INF\oem1.inf
[0 Bytes] Setup Information - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\7735880A01E3F94F763761958A7A8191
[132 Bytes] System file - C:\WINDOWS\LastGood\INF\oem1.PNF
[0 Bytes] Precompiled Setup Information - C:\WINDOWS\system32\FSScrCtl.exe
[241664 Bytes] Application - C:\WINDOWS\system32\rkinstaller.exe
[114688 Bytes] Application - C:\WINDOWS\system32\sporder.dll
[8464 Bytes] Application Extension - C:\WINDOWS\system32\Images of Washington DC.msf
[3633653 Bytes] MSF File - C:\WINDOWS\system32\Images of Washington DC.scr
[475136 Bytes] Screen Saver - C:\Documents and Settings\[USER]\Local Settings\Temp\iwashd25.exe
[4194783 Bytes] Application - desktop+\Free Animated Desktop Wallpaper.lnk
[1610 Bytes] Shortcut - C:\Program Files\Free Offers from Always Great Software\INSTALL.LOG
[17555 Bytes] Text Document - C:\WINDOWS\NDNuninstall5_64.exe
[49664 Bytes] Application - C:\Program Files\NewDotNet\newdotnet5_64.dll
[221184 Bytes] Application Extension - C:\Program Files\Always Great Software\Images of Washington DC\INSTALL.LOG
[2341 Bytes] Text Document - C:\Program Files\Always Great Software\Images of Washington DC\remove.exe
[61440 Bytes] Application - C:\Program Files\Always Great Software\Images of Washington DC\UNINSTAL.EXE
[153088 Bytes] Application - C:\Program Files\Free Offers from Always Great Software\dolphinico.url
[67 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\snowycottageico.ico
[3262 Bytes] Icon - C:\Program Files\Free Offers from Always Great Software\snowycottageico.url
[71 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\wfallsaw.ico
[2238 Bytes] Icon - C:\Program Files\Save\save.htm
[135229 Bytes] HTML Document - C:\Program Files\Save\store.db
[103 Bytes] Data Base File - C:\Program Files\Free Offers from Always Great Software\dolphinico.ico
[3262 Bytes] Icon - C:\Program Files\Save\SaveUninst.exe
[118200 Bytes] Application - C:\Program Files\Free Offers from Always Great Software\wfallsaw.url
[68 Bytes] Internet Shortcut - C:\Program Files\Save\save.db
[112020 Bytes] Data Base File - C:\Program Files\Save\ACM.dll
[516472 Bytes] Application Extension - C:\Program Files\Save\save.cch
[5320698 Bytes] CCH File - C:\Program Files\Save\ffext.mod
[12814 Bytes] MOD File
Additional information might be found here:
Search
at Google for
Adware Images of Washington DC Screensaver 2 5a
Search at Bing for
Adware Images of Washington DC Screensaver 2 5a
Search
at Yahoo for
Adware Images of Washington DC Screensaver 2 5a
How can I protect myself from Adware Images of Washington DC Screensaver 2 5a?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here
