P2P/Morpheus 1.9

Alias: Adware/WurldMedia, Morpheus 1.9

Description: P2P/Morpheus 1.9 is Internet Explorer browser helper object that detects visits to known sites and redirects them through a third-party server in order to generate affiliate fees. P2P/Morpheus 1.9 may create security issues as outsiders are granted access to internal files.

Threat type:

P2P - P2P is any peer-to-peer file swapping program. The following software applications are typical examples: Audiogalaxy, Bearshare, Blubster, E-Mule, Gnucleus, Grokster, Imesh, KaZaa, KaZaa Lite, Limewire, Morpheus, Shareaza, WinMX, Xolox, etc. P2P software may pose security issues because outsiders are granted access to you files. P2P can degrade network performance, consume vast amounts of storage and be bundled with adware and/or spyware programs.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects P2P/Morpheus 1.9: Yes

Threat risk: Medium Risk

Potentially dangerous malware. May collect sensitive user information and broadcast data back to a server with "opt-out" permission. Category includes most adware programs.

Symptoms:

P2P/Morpheus 1.9 displays commercial advertisements.

P2P/Morpheus 1.9 changes browser settings.

P2P/Morpheus 1.9 hides from the user and stays resident in background.

P2P/Morpheus 1.9 Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with P2P/Morpheus 1.9, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
%WINDOWS%\system32\mos.exe
%WINDOWS%\system32\clsnol22.dll
%WINDOWS%\system32\fkhjqhsj.dll
%WINDOWS%\system32\clsncx22.dll
%WINDOWS%\system32\mobho.dll
%WINDOWS%\system32\s4setp.exe
%WINDOWS%\system32\beegd10.ocx

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
N/A

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
Hacker Tool/SMF_Example.a
Hacker Tool/SMF_Example.b
Hacker Tool/Polymorphic Recursive Cycle Generator
Trojan/Hacker Tool/Constructor.Mktron
Hacker Tool/Spy Clock 2.1
Hacker Tool/Constructor.VRT
Hacker Tool/MVCK.C_D.Kit
Hacker Tool/Constructor.MSWord.WMVG
Spyware/Key Logger/ISpyNow
Spyware/Timesink