Emsisoft Malware-Info

Name: Adware.Win32.FreeStarWarsScreensaver

Risklevel: Low Risk

Company: Desktop XP - http://www.desktop-xp.com

Description:

Free Star Wars Screensaver bundled with AdVantage adware. It will modify IE start page, and connect to other malicious sites.

Removal instructions for Adware FreeStarWarsScreensaver:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware FreeStarWarsScreensaver.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Installation: Installed through EXE

Process: Free Star Wars Screensaver.scr

Screenshots:

FreeStarWarsScreensaverFreeStarWarsScreensaverFreeStarWarsScreensaverFreeStarWarsScreensaverFreeStarWarsScreensaverFreeStarWarsScreensaverFreeStarWarsScreensaverFreeStarWarsScreensaver

Used folders:

  • C:\Program Files\AdVantage\
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\content\
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\locale\en-US\
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\components\
  • C:\Program Files\Desktop XP\Screensaver Manager\
  • C:\Program Files\Desktop XP\Screensaver Manager\Help\
  • C:\Program Files\Desktop XP\Screensaver Manager\Img\
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\
  • C:\Program Files\Desktop XP\Screensaver Manager\XML\
  • C:\Program Files\Free Star Wars Screensaver\
  • C:\WINDOWS\
  • C:\WINDOWS\system32\
  • C:\Documents and Settings\All Users\Start Menu\Programs\Desktop XP\Screensaver Manager\
  • C:\Documents and Settings\All Users\Start Menu\Programs\Free Star Wars Screensaver\
  • C:\Documents and Settings\[USER]\Cookies\
  • C:\Documents and Settings\[USER]\Desktop\
  • C:\Documents and Settings\[USER]\Start Menu\

Used files:

  • C:\Program Files\AdVantage\AdVantage.cch
    [2285470 Bytes] CCH File
  • C:\Program Files\AdVantage\AdVantage.db
    [107260 Bytes] DB File
  • C:\Program Files\AdVantage\AdVantage.exe
    [883992 Bytes] EXE File
  • C:\Program Files\AdVantage\AdVantage.htm
    [141592 Bytes] HTM File
  • C:\Program Files\AdVantage\AdVantageupdate.exe
    [75608 Bytes] EXE File
  • C:\Program Files\AdVantage\AdVUninst.exe
    [453400 Bytes] EXE File
  • C:\Program Files\AdVantage\ffext.mod
    [17573 Bytes] MOD File
  • C:\Program Files\AdVantage\TR.dll
    [517856 Bytes] DLL File
  • C:\Program Files\AdVantage\user.db
    [367 Bytes] DB File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome.manifest
    [180 Bytes] MANIFEST File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\install.js
    [488 Bytes] JS File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\install.rdf
    [1002 Bytes] RDF File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\vssver2.scc
    [191 Bytes] SCC File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\content\advantage.png
    [1163 Bytes] PNG File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\content\contents.rdf
    [261 Bytes] RDF File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\content\overlay.js
    [4269 Bytes] JS File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\content\overlay.xul
    [313 Bytes] XUL File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\content\vssver2.scc
    [232 Bytes] SCC File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\locale\en-US\overlay.dtd
    [27 Bytes] DTD File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\chrome\locale\en-US\vssver2.scc
    [152 Bytes] SCC File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\components\IMeMedia_FF.xpt
    [150 Bytes] XPT File
  • C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\components\MeMedia_FF.dll
    [23040 Bytes] DLL File
  • C:\Program Files\Desktop XP\Screensaver Manager\error.log
    [21 Bytes] LOG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Launcher.exe
    [23552 Bytes] EXE File
  • C:\Program Files\Desktop XP\Screensaver Manager\unins000.dat
    [5308 Bytes] DAT File
  • C:\Program Files\Desktop XP\Screensaver Manager\unins000.exe
    [673546 Bytes] EXE File
  • C:\Program Files\Desktop XP\Screensaver Manager\Help\help.html
    [4303 Bytes] HTML File
  • C:\Program Files\Desktop XP\Screensaver Manager\Help\style.css
    [1193 Bytes] CSS File
  • C:\Program Files\Desktop XP\Screensaver Manager\Img\default.jpg
    [13057 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Img\new.jpg
    [12366 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Img\tick.gif
    [1057 Bytes] GIF File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\3dmatrix.jpg
    [6169 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\default.jpg
    [13476 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\fishaqua3d.jpg
    [5755 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\flowerclock3d.jpg
    [5763 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\freestarwars.jpg
    [3377 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\lake3d.jpg
    [3625 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\lighthouse.jpg
    [3370 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\nightcity3d.jpg
    [5817 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\solarsystem.jpg
    [4368 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\waterfall3d.jpg
    [5134 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\wilddolphin3d.jpg
    [4977 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\Screenshots\winter3d.jpg
    [3565 Bytes] JPG File
  • C:\Program Files\Desktop XP\Screensaver Manager\XML\configuration.xml
    [25258 Bytes] XML File
  • C:\Program Files\Free Star Wars Screensaver\ags.ico
    [2238 Bytes] ICO File
  • C:\Program Files\Free Star Wars Screensaver\ags.url
    [50 Bytes] URL File
  • C:\Program Files\Free Star Wars Screensaver\homepage.url
    [81 Bytes] URL File
  • C:\Program Files\Free Star Wars Screensaver\license.txt
    [3981 Bytes] TXT File
  • C:\Program Files\Free Star Wars Screensaver\unins000.dat
    [16983 Bytes] DAT File
  • C:\Program Files\Free Star Wars Screensaver\unins000.exe
    [673546 Bytes] EXE File
  • C:\Program Files\Free Star Wars Screensaver\xp.ico
    [5694 Bytes] ICO File
  • C:\Program Files\Free Star Wars Screensaver\xp.url
    [49 Bytes] URL File
  • C:\WINDOWS\setupapi.log
    [266658 Bytes] LOG File
  • C:\WINDOWS\system32\Desktop XP Screensaver Manager.scr
    [524288 Bytes] SCR File
  • C:\WINDOWS\system32\Free Star Wars Screensaver.html
    [2580 Bytes] HTML File
  • C:\WINDOWS\system32\Free Star Wars Screensaver.scr
    [2653881 Bytes] SCR File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Desktop XP\Screensaver Manager\About AdVantage.lnk
    [485 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Desktop XP\Screensaver Manager\AdVantage Customer Support.lnk
    [485 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Desktop XP\Screensaver Manager\Help.lnk
    [860 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Desktop XP\Screensaver Manager\Run Screensaver Manager.lnk
    [1708 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Desktop XP\Screensaver Manager\Uninstall.lnk
    [810 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Free Star Wars Screensaver\Open Free Star Wars Screensaver.lnk
    [1483 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Free Star Wars Screensaver\Read Me.lnk
    [711 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Free Star Wars Screensaver\Visit home page.lnk
    [738 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Cookies\user@memedia[2].txt
    [351 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Cookies\user@www.dufpy[2].txt
    [142 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Desktop\Desktop XP Screensaver Manager.lnk
    [1690 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\Free Star Wars Screensaver.lnk
    [694 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\More Free Screensavers.lnk
    [1403 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\Premium 3D Screensavers.lnk
    [1587 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Desktop XP Screensaver Manager.lnk
    [1690 Bytes] LNK File

Additional information might be found here:

Search at Google for Adware FreeStarWarsScreensaver Search at Google for Adware FreeStarWarsScreensaver
Search at Bing for Adware FreeStarWarsScreensaver Search at Bing for Adware FreeStarWarsScreensaver
Search at Yahoo for Adware FreeStarWarsScreensaver Search at Yahoo for Adware FreeStarWarsScreensaver

How can I protect myself from Adware FreeStarWarsScreensaver?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software