RECOMMENDATION!
ANTI-MALWARE TESTED
LATEST VICTORIES:
February 2012:
1. place for Emsisoft Internet Security
500 samples by virusovnet!
comss.ru
November 2011:
1. place for Emsisoft Anti-Malware
MRG Flash-Tests in 2011!
malwareresearchgroup.com
April 2010:
Best reactive scan - 60 products
98.72% in VB100 april test!
Virus Bulletin VB100
April 2010:
1. place for Emsisoft Anti-Malware
99.8% in MRG scanner test #23!
malwareresearchgroup.com
September 2009:
Best detection in all categories!
COM! Magazine test (German)
August 2009:
1. place: Emsisoft Anti-Malware
99.9% in static detection test of
PC Security Labs
REVIEWS/AWARDS
100% Wildlist detection
and 0 false alerts!
Best in test of comss.ru (Russian)
Emsisoft Anti-Malware was
awarded for its outstanding
total performance.
MRG: Best result in test!
Best static detection!
PC Magazine:
"Near-Perfect Protection:
It blocked every single one of the
samples the moment each one tried
to execute, scoring a perfect
10 of 10 points."
Best Free Trojan Scanner!
"Our favorite malware-masher:
Emsisoft Anti-Malware!"
SecuritySoftwareZone best rating
Tucows 5 cows!
"In terms of worms and spyware,
but also trojans, Emsisoft Anti-Malware can hardly be beaten."
ZDNet best rating
Emsisoft Anti-Malware with
best rating at Softpedia.com
MajorGeeks.com
Editor's Pick
Softpedia.com
Reviewer's pick
SoftWorld.com
Editor's Pick
FreeSharewareDepot.com
Editor's Pick
Recommended by:
Free Programs
EMSISOFT PRODUCTS
Emsisoft Malware-Info
Name: Adware.Win32.Noble Stallions Screen Saver
Risklevel: Moderate Risk
Company: White Paw Products - http://www.sexy-screen-savers.com/
Description:
Noble Stallions Screen Saver is an adware bundler that installs several adware with itself like Adware-NS.dldr and Spyware-WebHancer. Spyware-WebHancer modifies windows LSP stack so that it can monitor network activity and search keywords being transmitted silently.
Removal instructions for Adware Noble Stallions Screen Saver:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Noble Stallions Screen Saver.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- It installs several adware with itself like Adware-NS.dldr and Spyware-WebHancer.
- Spyware-WebHancer modifies windows LSP stack so that it can monitor network activity and search keywords being transmitted silently.
Installation: Installed through EXE
Process: Noble Stallions.scr
Used folders:
- C:\Program Files\Outerinfo
- C:\Program Files\Outerinfo\Cache
- C:\Program Files\webHancer
- C:\Program Files\webHancer\Programs
- C:\Program Files\whInstall
- C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo
- C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-682003330-2025429265-2147039463-500
- C:\Documents and Settings\[USER]\Application Data\Microsoft\Crypto\RSA\S-1-5-21-682003330-2025429265-2147039463-500
Used files:
- C:\Program Files\whInstall\WhAgent.exe
[184320 Bytes] Application - C:\WINDOWS\webhdll.dll
[40960 Bytes] Application Extension - C:\Program Files\whInstall\WhSurvey.exe
[155648 Bytes] Application - C:\Program Files\whInstall\whInstaller.ini
[760 Bytes] Configuration Settings - C:\Program Files\whInstall\whInstaller.exe
[77824 Bytes] Application - C:\Program Files\whInstall\whiehlpr.dll
[106496 Bytes] Application Extension - C:\Program Files\whInstall\Webhdll.dll
[40960 Bytes] Application Extension - C:\Program Files\whInstall\whAgent.inf
[4884 Bytes] Setup Information - C:\Documents and Settings\[USER]\Application Data\Microsoft\Crypto\RSA\S-1-5-21-682003330-2025429265-2147039463-500\a18ca4003deb042bbee7a40f15e1970b_7baad07c-84ba-4e1a-ac38-18d3ab923df3
[54 Bytes] System file - C:\WINDOWS\whAgent.inf
[4884 Bytes] Setup Information - C:\Program Files\whInstall\whAgent.ini
[17 Bytes] Configuration Settings - C:\WINDOWS\whInstaller.exe
[77824 Bytes] Application - C:\WINDOWS\whInstaller.ini
[357 Bytes] Configuration Settings - C:\WINDOWS\system32\Noble Stallions.ibx
[1,493,055 bytes ] Unknown application - C:\WINDOWS\system32\Noble Stallions.scr
[619008 Bytes] Screen Saver - C:\WINDOWS\system32\Outerinfo-1199.exe
[963680 Bytes] Application - C:\WINDOWS\system32\sstunst3.exe
[57344 Bytes] Application - C:\WINDOWS\system32\webhancer_winrar.exe
[214168 Bytes] Application - C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo\Terms.lnk
[614 Bytes] Shortcut - C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo\Uninstall.lnk
[1569 Bytes] Shortcut - C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\CREDHIST
[24 Bytes] System file - C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-682003330-2025429265-2147039463-500\Preferred
[24 Bytes] System file - C:\Program Files\webHancer\Programs\whSurvey.exe
[253952 Bytes] Application - C:\Documents and Settings\[USER]\Application Data\Microsoft\Protect\S-1-5-21-682003330-2025429265-2147039463-500\b75f556e-3ad3-4593-917c-93d834add3c2
[388 Bytes] System file - C:\Program Files\Outerinfo\OiUninstaller.exe
[141064 Bytes] Application - C:\Program Files\whInstall\readme.txt
[1533 Bytes] Text Document - C:\Program Files\Outerinfo\OinUninstall.exe
[66824 Bytes] Application - C:\Program Files\whInstall\Sporder.dll
[11264 Bytes] Application Extension - C:\Program Files\Outerinfo\Outerinfo.dll
[172032 Bytes] Application Extension - C:\Program Files\Outerinfo\Outerinfo.exe
[606208 Bytes] Application - C:\Program Files\Outerinfo\outerinfo.ico
[34494 Bytes] Icon - C:\Program Files\Outerinfo\OuterinfoUpdate.exe
[102400 Bytes] Application - C:\Program Files\Outerinfo\Terms.rtf
[18031 Bytes] Rich Text Format - C:\Program Files\Outerinfo\Cache\ctxad-573.0000
[12420 Bytes] 0000 File - C:\Program Files\webHancer\Programs\license.txt
[8292 Bytes] Text Document - C:\Program Files\webHancer\Programs\readme.txt
[1405 Bytes] Text Document - C:\Program Files\webHancer\Programs\whinstaller.exe
[262144 Bytes] Application - C:\Program Files\webHancer\Programs\SET15.tmp
[7572 Bytes] TMP File - C:\Program Files\whInstall\license.txt
[7572 Bytes] Text Document - C:\Program Files\webHancer\Programs\whiehlpr.dll
[159744 Bytes] Application Extension - C:\Program Files\webHancer\Programs\whAgent.ini
[209 Bytes] Configuration Settings - C:\Program Files\webHancer\Programs\whAgent.exe
[217088 Bytes] Application - C:\Program Files\webHancer\Programs\SET17.tmp
[1533 Bytes] TMP File - C:\Program Files\webHancer\Programs\sporder.dll
[11264 Bytes] Application Extension - C:\Program Files\webHancer\Programs\SET2C.tmp
[581632 Bytes] TMP File - C:\Program Files\webHancer\Programs\SET28.tmp
[1405 Bytes] TMP File - C:\Program Files\webHancer\Programs\SET26.tmp
[8292 Bytes] TMP File - C:\Program Files\webHancer\Programs\webhdll.dll
[122880 Bytes] Application Extension
Additional information might be found here:
Search
at Google for
Adware Noble Stallions Screen Saver
Search at Bing for
Adware Noble Stallions Screen Saver
Search
at Yahoo for
Adware Noble Stallions Screen Saver
How can I protect myself from Adware Noble Stallions Screen Saver?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here
