Adware/EXact Advertising

Alias: EXact Advertising

Description: From the publisher: 'The eXact Search Bar is FREE and includes the following features: eXact Search: Access search results from the web's leading search engines including Google, Lycos, AltaVista and more More Results: Use this button to search the same keyword at a different search engine Popular Searches:Access a list of some of the most frequently searched terms and the most relevant answers for each of them Yellow Pages: Look up businesses anywhere in the United States Shopping: Search the web's best bargains from hundreds of merchants Highlight: Highlight your search terms wherever they appear on the page Weather: Get current conditions and forecasts just by entering a city name or zip code Dictionary: Look up word definitions with the click of a button. '

Threat type:

Adware - Adware is a software application which displays advertisements on your computer. Advertisements can be displayed through pop-up / pop-under windows, additional bars or toolbars, underlined links or buttons that appear on a computer screen. Adware applications include additional code that delivers the ads. Adware authors earn money when users click on those ads. Occasionally, adware includes code that tracks user's site visits and passes it to third parties without the user's permission or knowledge.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects Adware/EXact Advertising: Yes

Threat risk: Medium Risk

Potentially dangerous malware. May collect sensitive user information and broadcast data back to a server with "opt-out" permission. Category includes most adware programs.

Symptoms:

Adware/EXact Advertising displays commercial advertisements.

Adware/EXact Advertising hides from the user and stays resident in background.

Adware/EXact Advertising Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with Adware/EXact Advertising, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
%WINDOWS%\installer_siac.exe
%PROFILE%\local settings\temporary internet files\content.ie5\a1538khn\installer_siac[1].exe
%WINDOWS%\system32\exdl3.exe
%WINDOWS%\system32\msbe.dll
%WINDOWS%\system32\msxct.exe
%WINDOWS%\system32\mqexdlm.srg
%WINDOWS%\system32\exdl.exe
%WINDOWS%\system32\exdl1.exe
%WINDOWS%\system32\exdl0.exe

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
N/A

Registry Signatures:
HKLM\software\classes\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}
HKCR\adp.urlcatcher.1
HKLM\software\exactutil
HKCR\clsid\{f4e04583-354e-4076-be7d-ed6a80fd66da}
HKLM\software\microsoft\windows\currentversion\explorer\browser helper objects\{f4e04583-354e-4076-be7d-ed6a80fd66da}
HKCR\adp.urlcatcher

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
Spyware/WurldMedia.BuyersPort
Dropper/Australian.Demo.3896
Hacker Tool/BW-based.src
Dropper/Macro.Access.Lovely
Toolbar/My Search
Adware/EXact Advertising Cashback
Adware/IEMenuExtension
Adware/SurfSideKick
Toolbar/SillyDl.EW
Trojan/Adware/Downloader/Agent.ae