Emsisoft Malware-Info

Name: Adware.Win32.F1Organizer

Risklevel: Low Risk

Description:

F1Organizer is an adware. It will modify registry and install a Browser Helper Object on the victim machine. We found this adware bundled with free screen saver.

Removal instructions for Adware F1Organizer:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware F1Organizer.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Installation: Installed through EXE

Screenshots:

F1OrganizerF1OrganizerF1OrganizerF1OrganizerF1OrganizerF1Organizer

Used folders:

  • C:\Program Files\aaascreensavers\bratz\
  • C:\Program Files\fkcqbq29\
  • C:\Program Files\VVSN\
  • C:\WINDOWS\
  • C:\WINDOWS\iClearSearch\h\
  • C:\WINDOWS\iNetPal\
  • C:\WINDOWS\iOneEighty\
  • C:\WINDOWS\LastGood\INF\
  • C:\WINDOWS\SYSTEM\
  • C:\WINDOWS\system32\
  • C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\
  • C:\WINDOWS\system32\CatRoot2\
  • C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\
  • C:\Documents and Settings\[USER]\Cookies\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\
  • C:\Documents and Settings\[USER]\Start Menu\Programs\aaascreensavers\

Used files:

  • C:\Program Files\aaascreensavers\bratz\aaa_install.ico
    [766 Bytes] ICO File
  • C:\Program Files\aaascreensavers\bratz\aaa_uninstall.ico
    [766 Bytes] ICO File
  • C:\Program Files\aaascreensavers\bratz\bratzss.exe
    [1626112 Bytes] EXE File
  • C:\Program Files\aaascreensavers\bratz\INSTALL.LOG
    [1716 Bytes] LOG File
  • C:\Program Files\aaascreensavers\bratz\UNWISE.EXE
    [162304 Bytes] EXE File
  • C:\Program Files\aaascreensavers\bratz\UNWISE.INI
    [29 Bytes] INI File
  • C:\Program Files\aaascreensavers\bratz\VVSN_AAAS0741Inst.exe
    [106568 Bytes] EXE File
  • C:\Program Files\fkcqbq29\fkcqbq29.exe
    [108032 Bytes] EXE File
  • C:\Program Files\VVSN\vvsn.cfg
    [334 Bytes] CFG File
  • C:\Program Files\VVSN\VVSN.exe
    [107592 Bytes] EXE File
  • C:\WINDOWS\HLInstaller3.exe
    [104784 Bytes] EXE File
  • C:\WINDOWS\setupapi.log
    [263765 Bytes] LOG File
  • C:\WINDOWS\Xhrmy.exe
    [180224 Bytes] EXE File
  • C:\WINDOWS\iClearSearch\h\CSv13P109.exe
    [108032 Bytes] EXE File
  • C:\WINDOWS\iNetPal\3ASavers_Om3IC.exe
    [212992 Bytes] EXE File
  • C:\WINDOWS\iOneEighty\saap.exe
    [282624 Bytes] EXE File
  • C:\WINDOWS\iOneEighty\saap.log
    [627 Bytes] LOG File
  • C:\WINDOWS\LastGood\INF\oem19.inf
    [0 Bytes] INF File
  • C:\WINDOWS\LastGood\INF\oem19.PNF
    [0 Bytes] PNF File
  • C:\WINDOWS\SYSTEM\Bratz.scr
    [1619933 Bytes] SCR File
  • C:\WINDOWS\system32\34yf28fg.exe
    [55296 Bytes] EXE File
  • C:\WINDOWS\system32\ATPartners.dll
    [96256 Bytes] DLL File
  • C:\WINDOWS\system32\COMMAND.COM
    [50620 Bytes] COM File
  • C:\WINDOWS\system32\DOSX.EXE
    [53840 Bytes] EXE File
  • C:\WINDOWS\system32\HIMEM.SYS
    [4768 Bytes] SYS File
  • C:\WINDOWS\system32\MSCDEXNT.EXE
    [817 Bytes] EXE File
  • C:\WINDOWS\system32\PreInstaller_p1.exe
    [39894 Bytes] EXE File
  • C:\WINDOWS\system32\REDIR.EXE
    [3338 Bytes] EXE File
  • C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
    [8 Bytes] File
  • C:\WINDOWS\system32\CatRoot2\dberr.txt
    [6612 Bytes] TXT File
  • C:\WINDOWS\system32\CatRoot2\edb.chk
    [8192 Bytes] CHK File
  • C:\WINDOWS\system32\CatRoot2\edb.log
    [131072 Bytes] LOG File
  • C:\WINDOWS\system32\CatRoot2\tmp.edb
    [1056768 Bytes] EDB File
  • C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
    [3153920 Bytes] File
  • C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
    [8 Bytes] File
  • C:\Documents and Settings\[USER]\Cookies\user@geocities[1].txt
    [87 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Cookies\user@yahoo[1].txt
    [82 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\Incredifind.exe
    [1063 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\aaascreensavers\Install bratz.lnk
    [1676 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\aaascreensavers\Uninstall bratz.lnk
    [1675 Bytes] LNK File

Additional information might be found here:

Search at Google for Adware F1Organizer Search at Google for Adware F1Organizer
Search at Bing for Adware F1Organizer Search at Bing for Adware F1Organizer
Search at Yahoo for Adware F1Organizer Search at Yahoo for Adware F1Organizer

How can I protect myself from Adware F1Organizer?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software