Emsisoft Malware-Info
Name: Adware.Win32.Toni Braxton Screen Saver
Risklevel: Low Risk
Company: celebrityscreensavers.com - http://www.celebrityscreensavers.com/
Description:
Toni Braxton Screen Saver is an adware bundler installs OneStepSearch and Save with itself. OneStepSearch is a program that may deliver advertisements on your PC. And SaveNow is an adware program that downloads and displays advertisements.
Removal instructions for Adware Toni Braxton Screen Saver:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Toni Braxton Screen Saver.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- It installs OneStepSearch and Save with itself.
- OneStepSearch is a program that may deliver advertisements on your PC. And SaveNow is an adware program that downloads and displays advertisements.
Installation: Installed through EXE
Process: Toni Braxton.scr
Screenshots:
Used folders:
- C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU
- C:\Program Files\OneStepSearch\OneStepSearch_deleted_
- C:\Program Files\OneStepSearch\OneStepSearch_deleted0
- C:\Program Files\Save
- C:\Program Files\filesubmit
- C:\Program Files\filesubmit\tonibrax.exe
- C:\Program Files\OneStepSearch
Used files:
- C:\Documents and Settings\[USER]\Start Menu\Programs\filesubmit\Install tonibrax.exe.lnk
[1627 Bytes] Shortcut - C:\WINDOWS\system32\Toni Braxton.scr
[6388034 Bytes] Screen Saver - C:\Program Files\filesubmit\tonibrax.exe\tonibrax.exe
[4257297 Bytes] Application - C:\Program Files\filesubmit\tonibrax.exe\UNWISE.INI
[29 Bytes] Configuration Settings - C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1
[48551 Bytes] System file - C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735
[558 Bytes] System file - C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1
[120 Bytes] System file - C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735
[144 Bytes] System file - C:\WINDOWS\system32\UnInstall Toni Braxton.exe
[9728 Bytes] Application - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Customer Support.lnk
[1400 Bytes] Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU Save.url
[94 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU SaveNow.url
[97 Bytes] Internet Shortcut - C:\Program Files\filesubmit\tonibrax.exe\fsi_uninstall.ico
[766 Bytes] Icon - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\WhenU.com Website.url
[76 Bytes] Internet Shortcut - C:\Program Files\Save\save.htm
[135229 Bytes] HTML Document - C:\Documents and Settings\[USER]\Start Menu\Programs\filesubmit\Uninstall tonibrax.exe.lnk
[1619 Bytes] Shortcut - desktop+\UnInstall Toni Braxton.lnk
[598 Bytes] Shortcut - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\7735880A01E3F94F763761958A7A8191
[1219 Bytes] System file - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Uninstall Instructions.lnk
[1400 Bytes] Shortcut - C:\Program Files\Save\ffext.mod
[12814 Bytes] MOD File - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\7735880A01E3F94F763761958A7A8191
[132 Bytes] System file - C:\Program Files\OneStepSearch\home.js
[145 Bytes] JScript Script File - C:\Program Files\OneStepSearch\onestep.dll
[475136 Bytes] Application Extension - C:\Program Files\OneStepSearch\onestep.exe
[3072 Bytes] Application - C:\Program Files\OneStepSearch\osopt.exe
[75272 Bytes] Application - C:\Program Files\OneStepSearch\readme.html
[4935 Bytes] HTML Document - C:\Program Files\OneStepSearch\OneStepSearch_deleted_\onestep.dll
[315392 Bytes] Application Extension - C:\Program Files\Save\store.db
[110 Bytes] Data Base File - C:\Program Files\Save\ACM.dll
[516472 Bytes] Application Extension - C:\Program Files\filesubmit\tonibrax.exe\fsi_install.ico
[766 Bytes] Icon - C:\Program Files\Save\save.cch
[4138824 Bytes] CCH File - C:\Program Files\Save\save.db
[114780 Bytes] Data Base File - C:\Program Files\Save\Save.exe
[803184 Bytes] Application - C:\Program Files\Save\SaveUninst.exe
[118200 Bytes] Application - C:\Program Files\filesubmit\~GLH0003.TMP
[291776 Bytes] TMP File - C:\Program Files\filesubmit\DealioKit1-stub-0.exe
[291776 Bytes] Application - C:\Program Files\filesubmit\oswdvaz118.exe
[300304 Bytes] Application - C:\Program Files\filesubmit\VVSNInst.exe
[106560 Bytes] Application - C:\Program Files\OneStepSearch\OneStepSearch_deleted_\onestep.exe
[3072 Bytes] Application
Additional information might be found here:
Search
at Google for
Adware Toni Braxton Screen Saver
Search at Bing for
Adware Toni Braxton Screen Saver
Search
at Yahoo for
Adware Toni Braxton Screen Saver
How can I protect myself from Adware Toni Braxton Screen Saver?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here































