Emsisoft Malware-Info

Name: Adware.Win32.Christmas Avatars

Risklevel: High Risk

Company: Yahoo Avatars - http://www.avatar-zone.com/

Description:

Christmas Avatars is an adware bundler that installs several other adware with itself like Adware-180SA (180solutions), Spyware-WebHancer and NDotNet (New.net). Spyware-WebHancer modifies windows LSP stack so that it can monitor network activity and search keywords being transmitted silently. Adware-180SA can display pop-up advertising, and may also redirect browsers to websites controlled by the makers of this program. Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

Removal instructions for Adware Christmas Avatars:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Christmas Avatars.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • It installs several other adware with itself like Adware-180SA (180solutions), Spyware-WebHancer and NDotNet (New.net).
  • Spyware-WebHancer modifies windows LSP stack so that it can monitor network activity and search keywords being transmitted silently. Adware-180SA can display pop-up advertising, and may also redirect browsers to websites controlled by the makers of this program. Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

Installation: Installed through EXE

Screenshots:

Christmas AvatarsChristmas AvatarsChristmas AvatarsChristmas AvatarsChristmas Avatars

Used folders:

  • C:\Program Files\180Search Assistant
  • C:\Program Files\180Search Assistant\180SA
  • C:\Program Files\NewDotNet
  • C:\Program Files\webHancer
  • C:\Program Files\webHancer\Programs
  • C:\Program Files\whInstall
  • desktop+\Christmas Avatars

Used files:

  • C:\Program Files\whInstall\whAgent.ini
    [17 Bytes] Configuration Settings
  • C:\Program Files\webHancer\Programs\readme.txt
    [1533 Bytes] Text Document
  • C:\Program Files\webHancer\Programs\license.txt
    [7572 Bytes] Text Document
  • C:\Program Files\whInstall\whSurvey.exe
    [143360 Bytes] Application
  • C:\Program Files\whInstall\whInstaller.ini
    [760 Bytes] Configuration Settings
  • C:\Program Files\whInstall\whAgent.inf
    [4882 Bytes] Setup Information
  • C:\Program Files\whInstall\whiehlpr.dll
    [106496 Bytes] Application Extension
  • C:\Program Files\whInstall\whAgent.exe
    [229376 Bytes] Application
  • C:\Program Files\whInstall\webhdll.dll
    [40960 Bytes] Application Extension
  • C:\WINDOWS\whInstaller.ini
    [357 Bytes] Configuration Settings
  • C:\Program Files\webHancer\Programs\SET22.tmp
    [8292 Bytes] TMP File
  • C:\Program Files\whInstall\whInstaller.exe
    [32768 Bytes] Application
  • C:\Program Files\webHancer\Programs\SET24.tmp
    [1405 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET28.tmp
    [569344 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET2A.tmp
    [159744 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET46.tmp
    [229376 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET48.tmp
    [106496 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET51.tmp
    [8292 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET53.tmp
    [1405 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET57.tmp
    [569344 Bytes] TMP File
  • C:\WINDOWS\webhdll.dll
    [40960 Bytes] Application Extension
  • C:\WINDOWS\whInstaller.exe
    [32768 Bytes] Application
  • desktop+\Christmas Avatars\AVATAR_3.gif
    [4213 Bytes] GIF Image
  • C:\Program Files\whInstall\Sporder.dll
    [11264 Bytes] Application Extension
  • C:\WINDOWS\whAgent.inf
    [4882 Bytes] Setup Information
  • C:\Program Files\NewDotNet\readme.txt
    [3522 Bytes] Text Document
  • C:\Program Files\whInstall\readme.txt
    [1533 Bytes] Text Document
  • desktop+\Christmas Avatars\AVATAR_37.jpg
    [2469 Bytes] JPEG Image
  • C:\Program Files\180Search Assistant\180SA\saap.exe
    [294912 Bytes] Application
  • C:\Program Files\NewDotNet\newdotnet3_88.dll
    [167936 Bytes] Application Extension
  • C:\Program Files\NewDotNet\uninstall3_88.exe
    [81408 Bytes] Application
  • desktop+\Christmas Avatars\AVATAR_1.gif
    [5741 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_12.gif
    [5012 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_13.gif
    [5271 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_18.png
    [5707 Bytes] PNG Image
  • desktop+\Christmas Avatars\AVATAR_24.png
    [3341 Bytes] PNG Image
  • desktop+\Christmas Avatars\AVATAR_28.png
    [9466 Bytes] PNG Image
  • desktop+\Christmas Avatars\CHRISTMAS_AVATARS_3.gif
    [3702 Bytes] GIF Image
  • C:\Program Files\180Search Assistant\180SA\saap.log
    [1186 Bytes] Text Document
  • desktop+\Christmas Avatars\CHRISTMAS_AVATARS_4.gif
    [3623 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_36.jpg
    [2272 Bytes] JPEG Image
  • C:\Program Files\whInstall\license.txt
    [7572 Bytes] Text Document
  • desktop+\Christmas Avatars\CHRISTMAS_AVATARS_2.gif
    [2216 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_9.gif
    [3940 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_8.gif
    [5470 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_6.gif
    [5137 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_5.gif
    [3743 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_4.gif
    [5226 Bytes] GIF Image
  • desktop+\Christmas Avatars\AVATAR_38.gif
    [4928 Bytes] GIF Image

Additional information might be found here:

Search at Google for Adware Christmas Avatars Search at Google for Adware Christmas Avatars
Search at Bing for Adware Christmas Avatars Search at Bing for Adware Christmas Avatars
Search at Yahoo for Adware Christmas Avatars Search at Yahoo for Adware Christmas Avatars

How can I protect myself from Adware Christmas Avatars?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software