English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

not-a-virus:AdWare.WinLNK.Agent.a

Detected Jul 26 2010 18:29 GMT
Released Jul 27 2010 01:10 GMT
Published Oct 22 2010 08:30 GMT

Technical Details
Payload
Removal instructions

Technical Details

This is a potentially unwanted program (PUP). It is a shortcut (LNK file). It is 1260 bytes in size.


Payload

The original file of this potentially unwanted program is created on the user's computer by another program. When this file is launched in the default browser, it opens the following link:

http://www.ad***nd.de/red/2302/?addsubid=D
At the time of writing, this link was inactive.


Removal instructions

If your computer does not have antivirus protection and has been infected by this malicious program, follow the instructions below to delete it:

  1. Delete the original Trojan file (its location will depend on how the program originally penetrated the infected computer).
  2. Perform a full scan of the computer using Kaspersky Anti-Virus with up-to-date antivirus databases (download a trial version).

Md5: [EBC0F280F5441152F92B2ED772815046]
Sha1: [703B762C48A0A29E40B1D928472D19DAA001A25C]


Bookmark and Share
Share
Adware

Adware covers programs designed to display advertisements (usually in the form of banners), redirect search requests to advertising websites, and collect marketing-type data about the user (e.g. which types of websites s/he visits) in order to display customized advertising on the computer.

Other than displaying advertisements and collecting data, these types of program generally do not make their presence in the system known: there will be no signs of the program in the system tray, and no indication in the program menu that files have been installed. Often, Adware programs do not have any uninstall procedures and use technologies which border on virus technology to help the program stealthily penetrate the computer and run unnoticed.


Aliases

not-a-virus:AdWare.WinLNK.Agent.a (Kaspersky Lab) is also known as:

  • Adware.Agent.NEV (BitDef7)
  • not-a-virus:AdWare.WinLNK (Ikarus)
  • 1, (FSecure)
  • (4, (FSecure)
  • not-a-virus:AdWare.WinLNK.Agent.a (FSecure)
  • 400) (FSecure)