a-squared Malware-Info

Name: Adware.Win32.Athens 2004 Olympic Games

Risklevel: Low Risk

Company: maxysoft.com - http://maxysoft.com/

Description:

Athens 2004 Olympic Games is an adware bundler that installs Adware-SaveNow,Adware-WhenUSearch (WhenU). Savenow is an adware program that downloads and displays advertisements. WhenUSearchBar is a desktop toolbar that monitors internet traffic, collects search profiles, and can execute code from a remote server using its update feature. Relevant searches may cause it to display a special offer, coupon, or other advertising content. The adware may also display advertisements.

Characteristics:

  • It installs Adware-SaveNow,Adware-WhenUSearch (WhenU) with itself.
  • Savenow is an adware program that downloads and displays advertisements.
  • WhenUSearchBar is a desktop toolbar that monitors internet traffic, collects search profiles, and can execute code from a remote server using its update feature. Relevant searches may cause it to display a special offer, coupon, or other advertising content. The adware may also display advertisements.

Installation: Installed through EXE

Process: Athens2004.scr

Screenshots:

Athens 2004 Olympic GamesAthens 2004 Olympic GamesAthens 2004 Olympic GamesAthens 2004 Olympic GamesAthens 2004 Olympic GamesAthens 2004 Olympic GamesAthens 2004 Olympic GamesAthens 2004 Olympic GamesAthens 2004 Olympic Games

Used folders:

  • C:\Program Files\WhenUSearch\Content
  • C:\Documents and Settings\All Users\Start Menu\Programs\Maxysoft
  • C:\Program Files\Save
  • C:\Documents and Settings\All Users\Start Menu\Programs\Maxysoft\Athens 2004 Olympic Games
  • C:\Program Files\WhenUSearch
  • C:\Documents and Settings\[USER]\Start Menu\Programs\WhenUSearch
  • C:\Documents and Settings\[USER]\Start Menu\Programs\ClockSync
  • C:\Program Files\Maxysoft\Athens2004
  • C:\Program Files\Maxysoft
  • C:\Program Files\ClockSync
  • C:\Program Files\WhenUSearch\Content\images

Used files:

  • C:\Program Files\WhenUSearch\Content\ui.cfg
    [38 Bytes] Microsoft Office Outlook Configuration File
  • C:\Program Files\WhenUSearch\Content\images\button_go.gif
    [436 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Uninst.exe
    [52288 Bytes] Application
  • C:\Program Files\WhenUSearch\Content\images\tab_left_on.gif
    [958 Bytes] GIF Image
  • C:\Program Files\Maxysoft\Athens2004\Athens2004.ico
    [3262 Bytes] Icon
  • C:\Program Files\ClockSync\Uninst.exe
    [45056 Bytes] Application
  • C:\Program Files\ClockSync\Sync.exe
    [126464 Bytes] Application
  • C:\Program Files\WhenUSearch\Content\images\tab_right_red.gif
    [183 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\tab_right_on.gif
    [420 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\right_more_left.gif
    [248 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\tab_right_down.gif
    [422 Bytes] GIF Image
  • C:\Program Files\Maxysoft\Athens2004\readme.txt
    [5796 Bytes] Text Document
  • C:\Program Files\WhenUSearch\Content\images\tab_left_off.gif
    [152 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\tab_left_down.gif
    [963 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\tab_left_bg.gif
    [78 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\spacer.gif
    [43 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\search_star.gif
    [90 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\right_more_up.gif
    [236 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\tab_right_off.gif
    [110 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\quick_instructions_top.gif
    [126 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\more_bottom_bg.gif
    [49 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\quick_close_down.gif
    [139 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\more_close_down.gif
    [171 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\more_close.gif
    [171 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\more_bottom_main_bg.gif
    [49 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\more_bottom_main.gif
    [49 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\quick_close.gif
    [379 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\more_bottom_left.gif
    [159 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\quick_results_top.gif
    [116 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\more_bottom_left_bg.gif
    [52 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\dollar_icon.gif
    [662 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\button_search_on.gif
    [229 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\button_search_off.gif
    [161 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\button_specials_on.gif
    [225 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\button_specials.gif
    [144 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\corner_bottom_left.gif
    [184 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\corner_top_left.gif
    [177 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\coupon_cart.gif
    [101 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\coupon_star.gif
    [90 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\button_specials_down.gif
    [227 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\dollar_icon_on.gif
    [662 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\dollar_icon2.gif
    [662 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\down_state.gif
    [341 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\instructions_border_corner.gif
    [44 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\instructions_border_right.gif
    [43 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\instructions_border_top.gif
    [43 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\instructions_bottom_bg.gif
    [52 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\instructions_close.gif
    [169 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\button_search_down.gif
    [625 Bytes] GIF Image
  • C:\Program Files\Save\Save.exe
    [328192 Bytes] Application
  • C:\Program Files\WhenUSearch\Content\images\instructions_close_down.gif
    [168 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\instructions_bottom_left.gif
    [197 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\instructions.html
    [5861 Bytes] Firefox Document
  • C:\Program Files\WhenUSearch\Content\images\link.gif
    [336 Bytes] GIF Image
  • C:\Program Files\Save\ReadMe.txt
    [3962 Bytes] Text Document
  • C:\Program Files\Save\save.db
    [47 Bytes] Data Base File
  • C:\Program Files\Save\save.htm
    [83189 Bytes] Firefox Document
  • C:\Program Files\WhenUSearch\search.cch
    [887807 Bytes] CCH File
  • C:\Program Files\WhenUSearch\search.db
    [65626 Bytes] Data Base File
  • C:\Program Files\WhenUSearch\search.dll
    [214016 Bytes] Application Extension
  • C:\Program Files\WhenUSearch\Search.exe
    [344064 Bytes] Application
  • C:\Program Files\WhenUSearch\search.htm
    [29751 Bytes] Firefox Document
  • C:\Program Files\Save\SaveUninst.exe
    [35388 Bytes] Application
  • C:\Program Files\WhenUSearch\Content\index.htm
    [12969 Bytes] Firefox Document
  • C:\Program Files\WhenUSearch\Content\images\button_go_down.gif
    [341 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\min.html
    [8525 Bytes] Firefox Document
  • C:\Program Files\WhenUSearch\Content\more.html
    [7101 Bytes] Firefox Document
  • C:\Program Files\WhenUSearch\Content\quick_coupon.html
    [6963 Bytes] Firefox Document
  • C:\Program Files\WhenUSearch\Content\quick_instructions.html
    [6203 Bytes] Firefox Document
  • C:\Program Files\WhenUSearch\Content\quick_search.html
    [6573 Bytes] Firefox Document
  • C:\Program Files\WhenUSearch\Content\quick_tutorial.html
    [3186 Bytes] Firefox Document
  • C:\Documents and Settings\All Users\Start Menu\Programs\Maxysoft\Athens 2004 Olympic Games\License Agreement.lnk
    [646 Bytes] Shortcut
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-606747145-790525478-1801674531-500\Preferred
    [24 Bytes] System file
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-606747145-790525478-1801674531-500\fc0748e8-fca3-4063-87b6-06485b004128
    [388 Bytes] System file
  • C:\Program Files\WhenUSearch\Content\images\instructions_corner_bottom_.gif
    [183 Bytes] GIF Image
  • desktop+\Get more free Screen Savers.lnk
    [803 Bytes] Shortcut
  • C:\Program Files\WhenUSearch\Content\images\instructions_gotosite.gif
    [905 Bytes] GIF Image
  • C:\Documents and Settings\All Users\Start Menu\Programs\Maxysoft\Athens 2004 Olympic Games\Uninstall Athens 2004 Olympic Games.lnk
    [658 Bytes] Shortcut
  • C:\Program Files\Maxysoft\Athens2004\LICENSE.TXT
    [10503 Bytes] Text Document
  • C:\Documents and Settings\All Users\Start Menu\Programs\Maxysoft\Athens 2004 Olympic Games\Read Me.lnk
    [641 Bytes] Shortcut
  • C:\Program Files\Maxysoft\Athens2004\maxysoft.url
    [64 Bytes] Internet Shortcut
  • C:\Documents and Settings\All Users\Start Menu\Programs\Maxysoft\Athens 2004 Olympic Games\Get More ScreenSavers.lnk
    [821 Bytes] Shortcut
  • C:\Documents and Settings\[USER]\Start Menu\Programs\WhenUSearch\WhenUSearch Desktop Toolbar.lnk
    [1417 Bytes] Shortcut
  • C:\Documents and Settings\[USER]\Start Menu\Programs\ClockSync\ClockSync.lnk
    [1387 Bytes] Shortcut
  • C:\WINDOWS\Athens2004.scr
    [5360640 Bytes] Screen Saver
  • C:\Program Files\Maxysoft\Athens2004\uninstall.ini
    [3025 Bytes] Configuration Settings
  • desktop+\Run Athens 2004 Olympic Games.lnk
    [1681 Bytes] Shortcut
  • C:\Documents and Settings\All Users\Start Menu\Programs\Maxysoft\Athens 2004 Olympic Games\Run Athens 2004 Olympic Games.lnk
    [1699 Bytes] Shortcut
  • C:\Program Files\WhenUSearch\Content\images\logo_searchbar_on.gif
    [819 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\min_searchbar.gif
    [1531 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\min_new_results.gif
    [349 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_whenusearch2_down.gif
    [895 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_whenusearch2.gif
    [711 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_whenusearch_on.gif
    [151 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\min_searchbar_on.gif
    [1530 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_whenusearch.gif
    [317 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\min_new_results_on.gif
    [349 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_searchbar_down.gif
    [818 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_searchbar.gif
    [756 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_now.gif
    [128 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo.gif
    [128 Bytes] GIF Image
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\CREDHIST
    [24 Bytes] System file
  • C:\Program Files\WhenUSearch\Content\images\right_left.gif
    [94 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_whenusearch_down.gif
    [152 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\quick_close_on.gif
    [379 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\right_instructions_red.gif
    [240 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\right_instructions_on.gif
    [240 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\right_instructions.gif
    [240 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\right_bg.gif
    [70 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\images\logo_whenusearch2_on.gif
    [894 Bytes] GIF Image
  • C:\Program Files\WhenUSearch\Content\right.html
    [25635 Bytes] Firefox Document

Additional information might be found here:

Search at Google for Adware Athens+2004+Olympic+Games Search at Google for Adware Athens+2004+Olympic+Games
Search at Bing for Adware Athens+2004+Olympic+Games Search at Bing for Adware Athens+2004+Olympic+Games
Search at Yahoo for Adware Athens+2004+Olympic+Games Search at Yahoo for Adware Athens+2004+Olympic+Games

Removal instructions for Adware Athens+2004+Olympic+Games:

To delete this malware infection, please download and install a-squared Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.

 

Best In Test!

a-squared Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
More independent reviews of anti-malware software