Emsisoft Malware-Info
Name: Adware.Win32.Deep Space Screensaver 2.5a
Risklevel: Elevated Risk
Company: Always Great Software, Inc - http://www.alwaysgreat.com/
Description:
Deep Space Screensaver 2.5a is an adware bundler that installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net). Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Removal instructions for Adware Deep Space Screensaver 2 5a:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Deep Space Screensaver 2 5a.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- It installs other adware with itself like Adware-SaveNow (WhenU), Adware-Url.gen and NDotNet (New.net).
- Adware-SaveNow (WhenU) may displays pop-up advertising on the desktop in response to users web browsing and Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.
Installation: Installed through EXE
Process: Deep Space.scr
Screenshots:
Used folders:
- C:\Program Files\Always Great Software\Deep Space
- C:\WINDOWS\LastGood\INF
- C:\WINDOWS\LastGood
- C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU
- C:\Program Files\Save
- C:\Program Files\NewDotNet
- C:\Program Files\Free Offers from Always Great Software
Used files:
- C:\WINDOWS\system32\Deep Space.scr
[475136 Bytes] Screen Saver - desktop+\3D Snowy Cottages ScreenSaver - Free.lnk
[1659 Bytes] Shortcut - C:\Program Files\Save\ACM.dll
[516472 Bytes] Application Extension - C:\Program Files\NewDotNet\readme.html
[6273 Bytes] HTML Document - C:\Program Files\NewDotNet\uninstall5_64.exe
[49664 Bytes] Application - C:\Program Files\Save\ffext.mod
[12814 Bytes] MOD File - C:\Program Files\Save\save.db
[4980687 Bytes] Data Base File - C:\Program Files\Save\Save.exe
[803184 Bytes] Application - C:\Program Files\Save\save.htm
[135229 Bytes] HTML Document - C:\Program Files\Save\store.db
[103 Bytes] Data Base File - C:\Program Files\Save\SaveUninst.exe
[118200 Bytes] Application - C:\Program Files\NewDotNet\newdotnet7_48.dll
[610304 Bytes] Application Extension - C:\Program Files\NewDotNet\newdotnet5_64.dll
[221184 Bytes] Application Extension - C:\Program Files\Free Offers from Always Great Software\wfallsaw.url
[68 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\wfallsaw.ico
[2238 Bytes] Icon - C:\Program Files\Free Offers from Always Great Software\snowycottageico.url
[71 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\snowycottageico.ico
[3262 Bytes] Icon - C:\Program Files\Free Offers from Always Great Software\INSTALL.LOG
[14604 Bytes] Text Document - C:\Program Files\Free Offers from Always Great Software\dolphinico.url
[67 Bytes] Internet Shortcut - C:\Program Files\Free Offers from Always Great Software\dolphinico.ico
[3262 Bytes] Icon - desktop+\Free Animated Desktop Wallpaper.lnk
[1610 Bytes] Shortcut - C:\Program Files\Always Great Software\Deep Space\remove.exe
[61440 Bytes] Application - C:\WINDOWS\NDNuninstall5_64.exe
[49664 Bytes] Application - C:\Program Files\Always Great Software\Deep Space\UNINSTAL.EXE
[153088 Bytes] Application - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\7735880A01E3F94F763761958A7A8191
[132 Bytes] System file - C:\Program Files\Always Great Software\Deep Space\INSTALL.LOG
[2081 Bytes] Text Document - C:\Documents and Settings\[USER]\Local Settings\Temp\deespa25.exe
[2522689 Bytes] Application - C:\WINDOWS\system32\CatRoot2\tmp.edb
[1056768 Bytes] EDB File - C:\WINDOWS\system32\sporder.dll
[8464 Bytes] Application Extension - C:\WINDOWS\system32\rkinstaller.exe
[114688 Bytes] Application - C:\WINDOWS\system32\FSScrCtl.exe
[241664 Bytes] Application - C:\WINDOWS\system32\Deep Space.msf
[2013072 Bytes] MSF File - C:\WINDOWS\LastGood\INF\oem1.PNF
[0 Bytes] Precompiled Setup Information - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
[124 Bytes] System file - C:\WINDOWS\NDNuninstall7_48.exe
[183808 Bytes] Application - desktop+\Free Dolphins ScreenSaver.lnk
[1624 Bytes] Shortcut - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1
[120 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\7735880A01E3F94F763761958A7A8191
[1219 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
[410133 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1
[46908 Bytes] System file - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\WhenU.com Website.url
[76 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Uninstall Instructions.lnk
[1400 Bytes] Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU SaveNow.url
[97 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Learn More About WhenU Save.url
[94 Bytes] Internet Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\WhenU\Customer Support.lnk
[1400 Bytes] Shortcut - C:\WINDOWS\LastGood\INF\oem1.inf
[0 Bytes] Setup Information
Additional information might be found here:
Search
at Google for
Adware Deep Space Screensaver 2 5a
Search at Bing for
Adware Deep Space Screensaver 2 5a
Search
at Yahoo for
Adware Deep Space Screensaver 2 5a
How can I protect myself from Adware Deep Space Screensaver 2 5a?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here
































