SpywareGuide powered by Actiance Security Labs
Search SpywareGuide Database & Site
Home Access the Guide
List of Products List of Companies List of Categories
Tools
X-RayPC
Terms and Definitions
 
Full Name:
Painter Websearch   Read More
Type: Trojan
Also Known as: Trojan.RealSearch(symantec)
SG Index: 8 [Explain]
Removal tools: List of products that detect/remove/protect against Painter:
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Trojans are malicious applications that pose themselves as legitimate software in order to trick users to install them. Once on the victim's machine, it may run any number of malicious process to steal vital information or inflict damage to other software.
    Comment: Painter is a dropper trojan comprises of multiple components, each having its own functionality.

    The functionalities includes

    Installs a Browser Helper Object, which drops another executable when Internet Explorer is started.

    Sends its live status to its server.

    Modifies search results from search engines. This is done by looking some intelligent text in the search results and creating links for it. Clicking on those links will result in showing advertisements (Shown in the below Screen Shots).

    Uses multiple Exploits to drop more malwares.

    Shows fake security-warning messages in the form of popup windows and balloon texts (Shown in the below Screen Shots). Clicking on these messages leads to advertisements to download rouge antispyware products.

    Note: The texts in the screen shots may vary everytime.
    Screenshots:
    Painter False popup showing bogus information
    Painter
    Painter
       
    Properties:
  •  Adds other software
  •  Installs Through Exploit
  • Click here to leave feedback for this product

    Recent Modifications
    2012-5-10  NetSpy
    2012-5-1  Unclassified Adware/Spyware
    2012-4-11  Adult Networks/Services
    2012-4-11  CoolWebSearch
    2012-3-13  Misc. Exploits
    2012-2-24  Zango Times
    2012-2-24  About Blank
    2012-1-30  HostSeeker Toolbar
    2012-1-13  2000Cracks
    2012-1-13  7AdPower Dialer
     
    Company  | Site and Spyware FAQ
    © Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy