| VID |
27302 |
| Severity |
30 |
| Port |
139,445 |
| Protocol |
TCP |
| Class |
MALWARE |
| Detailed Description |
The "Webhancer" program has been installed on the system.
The presence of this program is sometimes perceived as Spyware that can secretly monitor system activity. Generally, Spyware runs background process without their knowledge, which may violate your privacy or expose your confidential information to attacker or another computer. The Webhancer runs as a process named whAgent and send your Web surfing activity, including visited sites, and performance data to its controlling servers.
* Note: This check requires an account with Guest or upper privileges which can access the registry of the remote host to scan. Absence of these condition will result in the check not being performed and a False Negative for all vulnerable hosts.
* References:
http://securityresponse.symantec.com/avcenter/venc/data/spyware.webhancer.html
http://www.spywareguide.com/product_show.php?id=26
http://www.kephyr.com/spywarescanner/library/webhancer/index.phtml
http://www.safersite.com/PestInfo/w/webhancer.asp
* Platforms Affected:
Microsoft Windows Any version |
| Recommendation |
Remove it from your system using the following methods, if it's silently installed without the users knowledge or the use of it dose not match your security policy.
1. Using the uninstaller for it on the Add/Remove Program entry.
2. Using spyware/adware removal program or Vaccine(Anti-Virus) program. You can use the following programs:
- Norton AntiVirus: http://www.symantec.com/downloads
- McAfee VirusScan: http://download.mcafee.com/default.asp |
| Related URL |
(CVE) |
| Related URL |
(SecurityFocus) |
| Related URL |
(ISS) |
|
