Spyware:W32/WindUpdates

Classification

Category :

Spyware

Type :

Spyware

Aliases :

Media Gateway, Media Pass, WinAd, Media Access

Summary

This program negatively affects a user's control of their computer system or browsing experience, usually without their knowledge or consent.

Removal

Based on the settings of your F-Secure security product, it may block the file from running, move it to the quarantine where it cannot spread or cause harm, or ask you to select an action.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

Spyware:W32/WindUpdates displays advertisements, customized based on the surfing habits of the user. It may also install other software, unknown to the user, according to the End User License Agreement (EULA). Such behaviour is rated as a high security risk.

WindUpdates is created by 180solutions and can silently function as spyware, even though it is not branded as such.

It is distributed via ActiveX installations while visiting 3rd party websites, and bundled as an ad-support with 3rd party software. Some rumors also claim it is distributed by exploiting security flaws. It may be distributed using a large variety of names, to prevent users from accurately identifying it.

Spying Notification

The EULA states that without limitations, 180solutions is allowed to install new features in its current applications, or to install a new application without the user's knowledge or consent. WindUpdates Arbitrary data is also communicated to 180solutions servers. This information is hidden deep in the EULA, so that the average user would not find this clause.&

From the WindUpdates homepage, it appears that the software has no purpose other than delivering pop-up advertisements.

For more details about 180solutions, read the description here.