Adware Wengs
Type: Adware (General term 'Spyware' was previously used)
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XPSystems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX
This spyware threat can be detected only by spyware scanning software that support expanded threats.
The Spyware's Behavior
The spyware 'Wengs' is an adware program that changes the Internet Explorer home page and collects information for advertising purposes.Your home page will be changed to we.cn.gs.
This adware component would have to be manually installed, or installed as a component of another application that you install.
File names: Linmeimei.exe; Wupdate.exe
When Wengs Adware is executed, it performs the following :
Copies itself to System\Wupdate.exe.Adds the value:
"Windows Update" = System\Wupdate.exe
to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Run
so that the adware runs when you start Windows.
Changes the Internet Explorer home page to we.cn.gs.
Opens a browser window and displays a flash animation downloaded from the Internet.
Attempts to access the URL at 3721.com, which redirects users to Yahoo china (http: //cn.yahoo.com).
http:// cns.3721.com/cns.dll?fw=cm2&name
=%D1%C5%BB%A2&pid=U_angelye_19721
The spyware may download itself, or its updated version, from we.cn.gs.
*Make sure you run a full system spyware scan and delete all the files detected as Adware under the file name Wengs.
Delete the spyware value from the Registry.
Restore the Internet Explorer settings
Scanning for and deleting the Spyware files
Run your free spyware scanner and make sure that it is configured to scan all the files.Run a full system scan.
If any spyware files are detected as Adware under the file name Wengs, Delete them.
Deleting the Spyware Values from the Registry
Click Start, and then click Run. (The Run dialog box appears.)Type regedit
Then click OK. (The Registry Editor opens.)
Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Run
In the right pane, delete any values pertaining to "Windows Update."
Exit the Registry Editor.
Restoring the Internet Explorer settings
Start Microsoft Internet Explorer.Connect to the Internet and go to the page that you want to set as your home page.
Click Tools > Internet Options.
In the Home page section of the General tab, click Use Current >OK.
On the Programs tab, click Reset Web Settings.
You will find much more on this topic at WorldsLargestNetwork.com
 |
|
|
|
|
WorldsLargestNetwork.comFree Spyware Scanner
PC Speed Boost
Create Website Easily
Computer Monitoring Software
Internet Education
Anti Spy Software
Stop Pop Ups
Scan PC for Spyware
Pop-up Eliminator
