BitDefender Antivirus
Go

Adware.Whenu.BSQ

( Adware:Win32/Advantage Adware.SaveNow.origin ADSPY/Whenu.T Win32:Whenu )
Spreading: high
Damage: low
Size: ~ 884 kb
Discovered: 2008 Jun 02

SYMPTOMS:

     The sudden appearance of pop-ups from your Mozilla Firefox Browser displaying different adds related to your personal interests. The content of the adds is related to your browsing and searching habits.

TECHNICAL DESCRIPTION:

      This is a new variant of the well known advertising software distributed with various legitimate software,  named Adware.WhenU or Adware.SaveNow described here:
http://www.bitdefender.com/VIRUS-1000147-en--Adware.Whenu.E.html and
http://www.bitdefender.ro/VIRUS-1000131-ro--Adware.SaveNow.AX.html

      This new variant installs itself as a Mozilla Firefox browser extension. It has the capability of monitoring and spying all the content of the web pages opened by Firefox and all the search queries that you do with major web search engines.
      This information is used in advertising campaigns targeted directly to your computer or other computers and users that somehow share the same interests as you.




Removal instructions:

Please let BitDefender disinfect your files.

ANALYZED BY:

Mihai Cimpoesu, Virus Researcher