Home > Threat descriptions >

Adware:W32/WSearch

Classification

Category:  Spyware

Type:  Adware

Platform:  W32

Aliases:  -

Summary


This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.

Removal


Automatic action

Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details


This is the family description for the Adware:W32/WSearch adware family.

The WSearch adware family appears to be related to the Zhongsou Chinese Search Engine. While active and connected to the Internet, WSearch adware may display additional targeted pop-up advertisements and communicate with Zhongsou servers.

Installation

When a WSearch adware program's installer is executed, the program is silently installed. No end user license agreement (EULA) is displayed during the installation.&

The adware is installed to:

  • %programfiles%\DeskAdTop\
Network Connections

Attempts to connect with HTTP to:

  • https://download.zhongsou.com/
Removal

WSearch adware can be uninstalled from the Add/Remove Programs menu. The uninstallation process requires the user to complete a CAPTCHA test (Completely Automated Public Turing Test to Tell Computers and Humans Apart).

Once the program is uninstalled, its folder still needs to be manually deleted.

Description Created: 2009-03-24 05:17:49.0

Description Last Modified: 2009-03-24 08:11:22.0