Emsisoft Malware-Info

Name: Adware.Win32.Animal Scenics Screen Saver

Risklevel: Elevated Risk

Company: White Paw Products - http://www.sexy-screen-savers.com/

Description:

Animal Scenics Screen Saver is an adware bundler that installs Spyware-WebHancer with itself. Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. It also installs Clspring GW that is a kind of Trojan.

Removal instructions for Adware Animal Scenics Screen Saver:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Animal Scenics Screen Saver.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • It installs Spyware-WebHancer and Clspring GW with itself.
  • Spyware-WebHancer that has a process which starts at Windows startup and monitors web sites being viewed and sends performance data on the websites back to Webhancer s servers. The customer companion collects names of visited sites and how fast they are loaded, and sends them back to Webhancer s servers. Clspring GW is a kind of Trojan.

Installation: Installed through EXE

Process: Animal Scenics.scr

Screenshots:

Animal Scenics Screen SaverAnimal Scenics Screen SaverAnimal Scenics Screen SaverAnimal Scenics Screen SaverAnimal Scenics Screen SaverAnimal Scenics Screen SaverAnimal Scenics Screen Saver

Used folders:

  • C:\Program Files\Outerinfo\Cache
  • C:\Program Files\webHancer
  • C:\Program Files\webHancer\Programs
  • C:\Program Files\Outerinfo
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo
  • C:\Program Files\whInstall

Used files:

  • C:\Program Files\webHancer\Programs\sporder.dll
    [11264 Bytes] Application Extension
  • C:\Program Files\whInstall\whAgent.inf
    [4884 Bytes] Setup Information
  • C:\Program Files\whInstall\license.txt
    [7572 Bytes] Text Document
  • C:\Program Files\whInstall\Webhdll.dll
    [40960 Bytes] Application Extension
  • C:\Program Files\whInstall\Sporder.dll
    [11264 Bytes] Application Extension
  • C:\Program Files\whInstall\readme.txt
    [1533 Bytes] Text Document
  • C:\Program Files\whInstall\WhAgent.exe
    [172032 Bytes] Application
  • C:\Program Files\webHancer\Programs\whSurvey.exe
    [143360 Bytes] Application
  • C:\Program Files\webHancer\Programs\whiehlpr.dll
    [106496 Bytes] Application Extension
  • C:\Program Files\webHancer\Programs\whAgent.exe
    [172032 Bytes] Application
  • C:\Program Files\webHancer\Programs\readme.txt
    [1533 Bytes] Text Document
  • C:\Program Files\webHancer\Programs\license.txt
    [7572 Bytes] Text Document
  • C:\Program Files\whInstall\whInstaller.exe
    [32768 Bytes] Application
  • C:\Program Files\whInstall\whiehlpr.dll
    [106496 Bytes] Application Extension
  • C:\Program Files\webHancer\Programs\whAgent.ini
    [211 Bytes] Configuration Settings
  • C:\WINDOWS\system32\Animal Scenics.scr
    [573,440 bytes] Screen Saver
  • C:\Program Files\whInstall\whAgent.ini
    [17 Bytes] Configuration Settings
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1417001333-706699826-725345543-500\a18ca4003deb042bbee7a40f15e1970b_98b5dcf8-e0ab-45f8-b3c2-daf0f5ab643a
    [54 Bytes] System file
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-1417001333-706699826-725345543-500\Preferred
    [24 Bytes] System file
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-1417001333-706699826-725345543-500\9509fba7-4692-439e-a4c6-9005a56f43f3
    [388 Bytes] System file
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\CREDHIST
    [24 Bytes] System file
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo\Uninstall.lnk
    [1569 Bytes] Shortcut
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo\Terms.lnk
    [614 Bytes] Shortcut
  • C:\WINDOWS\system32\webhancer_winrar.exe
    [214168 Bytes] Application
  • C:\WINDOWS\system32\Outerinfo-1199.exe
    [963680 Bytes] Application
  • C:\WINDOWS\system32\Animal Scenics.ibx
    [1,291,140 bytes] IBX File
  • C:\WINDOWS\whInstaller.ini
    [357 Bytes] Configuration Settings
  • C:\Program Files\Outerinfo\Outerinfo.dll
    [172032 Bytes] Application Extension
  • C:\Program Files\whInstall\whInstaller.ini
    [760 Bytes] Configuration Settings
  • C:\Program Files\whInstall\WhSurvey.exe
    [143360 Bytes] Application
  • C:\WINDOWS\system32\sstunst3.exe
    [45056 Bytes] Application
  • C:\Program Files\Outerinfo\OiUninstaller.exe
    [141064 Bytes] Application
  • C:\WINDOWS\whInstaller.exe
    [32768 Bytes] Application
  • C:\Program Files\Outerinfo\Outerinfo.exe
    [593920 Bytes] Application
  • C:\Program Files\Outerinfo\outerinfo.ico
    [34494 Bytes] Icon
  • C:\Program Files\Outerinfo\OuterinfoUpdate.exe
    [88064 Bytes] Application
  • C:\Program Files\Outerinfo\Terms.rtf
    [18031 Bytes] Rich Text Format
  • C:\WINDOWS\webhdll.dll
    [40960 Bytes] Application Extension
  • C:\WINDOWS\whAgent.inf
    [4884 Bytes] Setup Information
  • C:\Program Files\Outerinfo\OinUninstall.exe
    [66824 Bytes] Application

Additional information might be found here:

Search at Google for Adware Animal Scenics Screen Saver Search at Google for Adware Animal Scenics Screen Saver
Search at Bing for Adware Animal Scenics Screen Saver Search at Bing for Adware Animal Scenics Screen Saver
Search at Yahoo for Adware Animal Scenics Screen Saver Search at Yahoo for Adware Animal Scenics Screen Saver

How can I protect myself from Adware Animal Scenics Screen Saver?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software