Spyware Detail

Summary

DownloadWare is a process that runs on Windows startup. If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers.

It may be installed through an ActiveX control called ActiveInstall, which decodes and runs a built-in executable and then (tries to) remove itself. This executable can include DownloadWare and other bundled software - often premium-rate diallers from Movie Networks, Popcorn.net, MVPNetworks or Real-Tens.

Alias

MediaLoads or ClipGenie. This is actually an application loaded by DownloadWare which shows any videos or pictures DW has downloaded. However DownloadWare is also now being marketed under both these names as well as its own.
Win32.BettInet.F[Computer Associates]
TrojanDownloader.Win32.Realtens.e[Kaspersky]
Win32/TrojanDownloader.Realtens.E trojan[Eset]
Adware/DownloadWare[Panda]
TrojanDownloader.Win32.BHO[Kaspersky]
TrojanDownloader.Win32.VB.ah[Kaspersky]
Trojan Horse[Panda]

Category

Adware:  Software that displays pop-up/pop-under advertisements when the primary user interface is not visible, or which do not appear to be associated with the product.

Downloader:  A program that downloads and may execute or install software without user permission.

Search Hijacker:  Any software that resets your browser's settings to point to other sites when you perform a search. Hijacks may reroute your info and address requests through an unseen site, capturing that info. In such hijacks, your browser may behave normally, but be slower. Search results when such a hijacker is running will sometimes differ from non-hijacked results.

Toolbar:  A group of buttons which perform common tasks. A toolbar for Internet Explorer is nomally located below the menu bar at the top of the form. Toolbars may be created by Browser Helper Objects.

Trojan:  Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.



Reasons For Retention

Changes browser settings other than homepage, without user permission.

View Full Details