Adware.CWSIEFeats
Adware.CWSIEFeats is a program that displays random advertisements in the form of pop-up windows. Adware.CWSIEFeats can be obtained via drive-by downloads or spam e-mails. Adware.CWSIEFeats stores itself as an Internet Explorer Browser Helper Object once it is inside a system. Adware.CWSIEFeats may also monitor a user's web browsing activities and gather any other internet related information. Adware.CWSIEFeats is a potentially unwanted program that can be removed with an anti-spyware program.
File System Details
Adware.CWSIEFeats may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %CommonAppData%\WILCOQUMJWNAG\WIEQLGLNAG.cfg | |
| 2. | %System%\WINAGSys\vd952342.bd |
Registry Details
Adware.CWSIEFeats may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\agent.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntispywarXP2009.exe]
Debugger = "svchost.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Anti-Virus Professional.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe]
