SpywareGuide powered by Actiance Security Labs
Search SpywareGuide Database & Site
Home Access the Guide
List of Products List of Companies List of Categories
Tools
X-RayPC
Terms and Definitions
 
Full Name:
DownloadWare Websearch   Read More
Type: Adware
Also Known as: MediaLoads ClipGenie
Created by: InterCort Systems, Inc
SG Index: 4 [Explain]
Removal tools: List of products that detect/remove/protect against DownloadWare:
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Program that delivers advertisements on your PC.

    Note that many websites have their own advertising, unrelated to adware.

    Adware is any software application in which advertising is displayed while the program is running. The authors of these applications include additional code that delivers the ads, which can be viewed through pop-up windows or through a bar that appears on a computer screen and sometimes through text links or in integrated search results. Adware may or may not track personal information. It may also gather information anonymously or in aggregate only. Users should check the EULA and Privacy policy to ensure if the adware on their machines conforms to their standards.
    Official Description: DownloadWare is a process that runs on Windows startup. If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers.
    pqnelhleyy 266bb3f0 4fc036f1

    It may be installed through an ActiveX control called ActiveInstall, which decodes and runs a built-in executable and then (tries to) remove itself. This executable can include DownloadWare and other bundled software - often premium-rate diallers from Movie Networks, Popcorn.net, MVPNetworks or Real-Tens [sic].
    Comment: This program is bundled with NetworkEssentials.
    Information URL: http://www.downloadware.net/
       
    Manual removal: There is an Add/Remove Programs entry, for 'DownloadWare', but it may sometimes not work

    As well as removing DownloadWare you should check your system for other things it has installed and get rid of them too. This may include:

    Network Essentials (or its variant 'MediaLoads Enhanced')
    PAgent - scans your hard drive for the popular P2P file-sharing applications bearshare.exe, grokster.exe, kazaa.exe, limewire.exe and morpheus.exe. After searching the entire local filesystem for any files with those names it connects to the DownloadWare servers and tells it what, if anything, it found. To remove, run regedit and go to:

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    and remove the "PAgent" value. Open the Task Manager (Ctrl-Alt-Delete) and kill PAgent if it is still running. You can now delete the 'PAgent' folder in your Program Files directory. You can also clean up the key HKEY_CURRENT_USER\Software\PAgent if you like.

    Casino games (Vegas Palms, Royal Vegas) - large installation of gambling games. Use Add/Remove Programs to remove it. A key will be left in the registry under HKLM\Software\MicroGaming which you can remove if you wish.

    KFH - lurks in the background and every so often launches a very large Flash advert, for Vegas Palms, Ryal Vegas or Five Roses casinos. Go to Add/Remove Programs and get rid of the entry with the name of the casino followed by '- Launcher'. Kill the task (Task Manager) and you can delete the 'KFH' folder in your Program Files directory. You can also clean up the key HKLM\Software\KFH if you like.

    MediaLoads - downloads various pointless pictures and videos in the background if you ask it to, otherwise harmless. Remove from Add/Remove Programs. An empty Program Files folder and an entry in your Start menu will be left which you can delete if you want, along with the HKEY_CURRENT_USER\Software\MediaLoads registry key.

    WinEME - purpose unknown. It has mail-sending capability, and can send through any mail server set up in Outlook Express, but what it sends and when is so far a mystery.

    Finally, check for a folder called 'MedCh', along with 'MovieNetworks', 'Popcorn.net' and 'Real-Tens' folders in Program Files - one of these or others may have come with the original ActiveInstall. If you find one of these, delete it and check your Dial-up Networking connections for a 'dialer' entry. Remove it - if you dial it it will cost you a lot of money.

    Manual removal
    Load regedit and go to:

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    Remove the 'DownloadWare' value. Open the Task Manager (Ctrl-Alt-Del) and kill the task called 'Dw' if it is still running. Now you can delete the 'DownloadWare' folder in the Program Files directory. You can also clean up the 'DownloadWare' and 'WebInstall' keys in HKEY_CURRENT_USER\Software\.
    Properties:
  •  Autostarts/Stays Resident
  •  Connects to the internet
  •  Shows Advertisements
  •  Stealth Tactics
  • Click here to leave feedback for this product

    Recent Modifications
    2012-5-10  NetSpy
    2012-5-1  Unclassified Adware/Spyware
    2012-4-11  Adult Networks/Services
    2012-4-11  CoolWebSearch
    2012-3-13  Misc. Exploits
    2012-2-24  Zango Times
    2012-2-24  About Blank
    2012-1-30  HostSeeker Toolbar
    2012-1-13  2000Cracks
    2012-1-13  7AdPower Dialer
     
    Company  | Site and Spyware FAQ
    © Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy