Emsisoft Malware-Info

Name: Adware.Win32.Sailormoon Screen Saver

Risklevel: Elevated Risk

Company: sitevip.net - http://www.sitevip.net/

Description:

Sailormoon Screen Saver is an adware bundler that installs adware NDotNet (New.net) with itself.Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content. When an end-user enters a keyword into a browser address bar or attempts to resolve a mistaken or non-existent URL, the adware redirects the user to a sponsored page.

Removal instructions for Adware Sailormoon Screen Saver:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Sailormoon Screen Saver.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • It installs adware NDotNet (New.net) with itself.
  • Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content. When an end-user enters a keyword into a browser address bar or attempts to resolve a mistaken or non-existent URL, the adware redirects the user to a sponsored page.

Installation: Installed through EXE

Process: Sailormoon Screen Saver.scr

Screenshots:

Sailormoon Screen SaverSailormoon Screen SaverSailormoon Screen SaverSailormoon Screen SaverSailormoon Screen SaverSailormoon Screen SaverSailormoon Screen SaverSailormoon Screen SaverSailormoon Screen Saver

Used folders:

  • C:\WINDOWS\iNetPal
  • C:\Program Files\filesubmit
  • C:\Program Files\filesubmit\LO_sailormoon.exe
  • C:\Program Files\NewDotNet
  • C:\Program Files\QuickSearch
  • C:\Documents and Settings\[USER]\Start Menu\Programs\filesubmit
  • C:\WINDOWS\iDefender

Used files:

  • C:\WINDOWS\WSST_Screen_Saver.ini
    [84 Bytes] Configuration Settings
  • C:\WINDOWS\iDefender\def_bundle.exe
    [39022 Bytes] Application
  • C:\WINDOWS\iNetPal\m3tsp8.exe
    [55296 Bytes] Application
  • C:\WINDOWS\system32\m3tsp8.dll
    [95744 Bytes] Application Extension
  • C:\WINDOWS\system32\snbd6w9s.dll
    [322048 Bytes] Application Extension
  • C:\WINDOWS\system32\ssconfig.exe
    [22528 Bytes] Application
  • desktop+\FREE BonziBUDDY.url
    [151 Bytes] Internet Shortcut
  • C:\Documents and Settings\[USER]\Start Menu\Programs\filesubmit\Uninstall LO_sailormoon.exe.lnk
    [1644 Bytes] Shortcut
  • C:\WINDOWS\Sailormoon Screen Saver.scr
    [1334844 Bytes] Screen Saver
  • C:\Program Files\filesubmit\LO_sailormoon.exe\fsi_install.ico
    [766 Bytes] Icon
  • C:\Documents and Settings\[USER]\Start Menu\Programs\filesubmit\Install LO_sailormoon.exe.lnk
    [1677 Bytes] Shortcut
  • C:\Program Files\QuickSearch\QuickSearchBar1_27.dll
    [241664 Bytes] Application Extension
  • C:\Program Files\NewDotNet\readme.txt
    [3522 Bytes] Text Document
  • C:\Program Files\NewDotNet\newdotnet3_88.dll
    [167936 Bytes] Application Extension
  • C:\Program Files\filesubmit\LO_sailormoon.exe\UNWISE.INI
    [29 Bytes] Configuration Settings
  • C:\Program Files\filesubmit\LO_sailormoon.exe\TBEZA127Q.exe
    [282624 Bytes] Application
  • C:\Program Files\filesubmit\LO_sailormoon.exe\NNEZTA388.exe
    [196608 Bytes] Application
  • C:\Program Files\filesubmit\LO_sailormoon.exe\LO_sailormoon.exe
    [1733471 Bytes] Application
  • C:\Program Files\filesubmit\LO_sailormoon.exe\fsi_uninstall.ico
    [766 Bytes] Icon
  • C:\Program Files\filesubmit\LO_sailormoon.exe\bonzi.exe
    [117511 Bytes] Application
  • C:\Documents and Settings\[USER]\Start Menu\FREE BonziBUDDY.url
    [151 Bytes] Internet Shortcut
  • C:\Program Files\filesubmit\LO_sailormoon.exe\INSTALL.LOG
    [1903 Bytes] Text Document

Additional information might be found here:

Search at Google for Adware Sailormoon Screen Saver Search at Google for Adware Sailormoon Screen Saver
Search at Bing for Adware Sailormoon Screen Saver Search at Bing for Adware Sailormoon Screen Saver
Search at Yahoo for Adware Sailormoon Screen Saver Search at Yahoo for Adware Sailormoon Screen Saver

How can I protect myself from Adware Sailormoon Screen Saver?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software