Threat Description

Adware:​W32/WSearch

Details

Category: Spyware
Type: Adware
Platform: W32

Summary



This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



This is the family description for the Adware:W32/WSearch adware family.

The WSearch adware family appears to be related to the Zhongsou Chinese Search Engine. While active and connected to the Internet, WSearch adware may display additional targeted pop-up advertisements and communicate with Zhongsou servers.

Installation

When a WSearch adware program's installer is executed, the program is silently installed. No end user license agreement (EULA) is displayed during the installation.&

The adware is installed to:

  • %programfiles%\DeskAdTop\

Network Connections

Attempts to connect with HTTP to:

  • http://download.zhongsou.com/

Removal

WSearch adware can be uninstalled from the Add/Remove Programs menu. The uninstallation process requires the user to complete a CAPTCHA test (Completely Automated Public Turing Test to Tell Computers and Humans Apart).

Once the program is uninstalled, its folder still needs to be manually deleted.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Submit a sample

Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Learn More

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More