Emsisoft Malware-Info

Name: Adware.Win32.Tokyo Beauties Screen Saver

Risklevel: Elevated Risk

Company: White Paw Products - http://software.techrepublic.com/

Description:

Tokyo Beauties Screen Saver is an adware bundler that installs Spyware-WebHancer with itself. Webhancer is a program that monitors Web sites visited and sends this information to a remote server.

Removal instructions for Adware Tokyo Beauties Screen Saver:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Tokyo Beauties Screen Saver.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • It installs Spyware-WebHancer with itself.
  • Webhancer is a program that monitors Web sites visited and sends this information to a remote server.

Installation: Installed through EXE

Process: Tokyo Beauties.scr

Screenshots:

Tokyo Beauties Screen SaverTokyo Beauties Screen SaverTokyo Beauties Screen SaverTokyo Beauties Screen SaverTokyo Beauties Screen SaverTokyo Beauties Screen SaverTokyo Beauties Screen Saver

Used folders:

  • C:\Program Files\Outerinfo
  • C:\Program Files\whInstall
  • C:\Program Files\Outerinfo\FF\components
  • C:\Program Files\Outerinfo\Cache
  • C:\Program Files\webHancer\Programs
  • C:\Program Files\webHancer
  • C:\Program Files\Outerinfo\FF

Used files:

  • C:\WINDOWS\system32\sstunst3.exe
    [57344 Bytes] Application
  • C:\Program Files\Outerinfo\FF\components\FF.dll
    [45056 Bytes] Application Extension
  • C:\Program Files\whInstall\whiehlpr.dll
    [106496 Bytes] Application Extension
  • C:\WINDOWS\whInstaller.exe
    [45056 Bytes] Application
  • C:\Program Files\whInstall\license.txt
    [7572 Bytes] Text Document
  • C:\Program Files\whInstall\readme.txt
    [1533 Bytes] Text Document
  • C:\Program Files\whInstall\Sporder.dll
    [11264 Bytes] Application Extension
  • C:\Program Files\whInstall\Webhdll.dll
    [40960 Bytes] Application Extension
  • C:\Program Files\whInstall\WhAgent.exe
    [184320 Bytes] Application
  • C:\Program Files\whInstall\whAgent.inf
    [4884 Bytes] Setup Information
  • C:\Program Files\whInstall\whAgent.ini
    [17 Bytes] Configuration Settings
  • C:\Program Files\Outerinfo\FF\components\OuterinfoAds.xpt
    [138 Bytes] XPT File
  • C:\Program Files\whInstall\whInstaller.exe
    [45056 Bytes] Application
  • C:\Program Files\whInstall\whInstaller.ini
    [760 Bytes] Configuration Settings
  • C:\Program Files\whInstall\WhSurvey.exe
    [286720 Bytes] Application
  • C:\WINDOWS\system32\Outerinfo-1199.exe
    [963680 Bytes] Application
  • C:\WINDOWS\system32\Tokyo Beauties.ibx
    [1497646 Bytes] IBX File
  • C:\WINDOWS\system32\Tokyo Beauties.scr
    [586240 Bytes] Screen Saver
  • C:\WINDOWS\whAgent.inf
    [4884 Bytes] Setup Information
  • C:\Program Files\Outerinfo\outerinfo.ico
    [34494 Bytes] Icon
  • C:\WINDOWS\whInstaller.ini
    [357 Bytes] Configuration Settings
  • C:\WINDOWS\webhdll.dll
    [40960 Bytes] Application Extension
  • C:\Program Files\webHancer\Programs\sporder.dll
    [11264 Bytes] Application Extension
  • C:\Program Files\webHancer\Programs\license.txt
    [7572 Bytes] Text Document
  • C:\Program Files\webHancer\Programs\readme.txt
    [1533 Bytes] Text Document
  • C:\Program Files\webHancer\Programs\SET104.tmp
    [8292 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET106.tmp
    [1405 Bytes] TMP File
  • C:\Program Files\Outerinfo\Terms.rtf
    [18031 Bytes] Rich Text Format
  • C:\Program Files\webHancer\Programs\SET10C.tmp
    [159744 Bytes] TMP File
  • C:\Program Files\Outerinfo\FF\install.rdf
    [766 Bytes] RDF File
  • C:\Program Files\webHancer\Programs\webhdll.dll
    [122880 Bytes] Application Extension
  • C:\Program Files\webHancer\Programs\whAgent.exe
    [184320 Bytes] Application
  • C:\Program Files\webHancer\Programs\whAgent.ini
    [210 Bytes] Configuration Settings
  • C:\Program Files\Outerinfo\FF\chrome.manifest
    [0 Bytes] MANIFEST File
  • C:\Program Files\webHancer\Programs\whinstaller.exe
    [327680 Bytes] Application
  • C:\Program Files\webHancer\Programs\whSurvey.exe
    [286720 Bytes] Application
  • C:\Program Files\Outerinfo\OinUninstall.exe
    [66824 Bytes] Application
  • C:\Program Files\Outerinfo\OiUninstaller.exe
    [141064 Bytes] Application
  • C:\Program Files\Outerinfo\Outerinfo.dll
    [172032 Bytes] Application Extension
  • C:\Program Files\Outerinfo\Outerinfo.exe
    [614400 Bytes] Application
  • C:\Program Files\Outerinfo\OuterinfoUpdate.exe
    [102400 Bytes] Application
  • C:\Program Files\webHancer\Programs\whiehlpr.dll
    [106496 Bytes] Application Extension
  • C:\Program Files\webHancer\Programs\SET10A.tmp
    [581632 Bytes] TMP File

Additional information might be found here:

Search at Google for Adware Tokyo Beauties Screen Saver Search at Google for Adware Tokyo Beauties Screen Saver
Search at Bing for Adware Tokyo Beauties Screen Saver Search at Bing for Adware Tokyo Beauties Screen Saver
Search at Yahoo for Adware Tokyo Beauties Screen Saver Search at Yahoo for Adware Tokyo Beauties Screen Saver

How can I protect myself from Adware Tokyo Beauties Screen Saver?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software