| VID |
27324 |
| Severity |
20 |
| Port |
139,445 |
| Protocol |
TCP |
| Class |
MALWARE |
| Detailed Description |
The "BetterInternet" program has been installed on the system.
The presence of this program is sometimes perceived as as Adware that can display ads, or as BHO that runs automatically every time you start your Internet browser. Generally, Adware and BHO may expose your browsing habits to a central ad server or their creators and replace banner advertisements with other ads, change your home page. The BetterInternet opens pop-up advertisement windows and reports back to its servers(domains within abetterinternet.com) with URLs you have visited and your computer configuration and software. Also, this program updates itself silently and installs other software. It's likely to slow performance of Internet Explorer.
* Note: This check requires an account with Guest or upper privileges which can access the registry of the remote host to scan. Absence of these condition will result in the check not being performed and a False Negative for all vulnerable hosts.
* References:
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100829
http://securityresponse.symantec.com/avcenter/venc/data/adware.binet.html
http://www.kephyr.com/spywarescanner/library/abetterinternet/index.phtml
http://www.spywareguide.com/product_show.php?id=702
http://pestpatrol.com/pestinfo/v/vx2.asp
* Platforms Affected:
Microsoft Windows Any version |
| Recommendation |
Remove it from your system using the following methods, if it's silently installed without the users knowledge or the use of it dose not match your security policy.
1. Using the uninstaller for it on the Add/Remove Program entry.
2. Using spyware/adware removal program or Vaccine(Anti-Virus) program. You can use the following programs:
- Norton AntiVirus: http://www.symantec.com/downloads
- McAfee VirusScan: http://download.mcafee.com/default.asp |
| Related URL |
(CVE) |
| Related URL |
(SecurityFocus) |
| Related URL |
(ISS) |
|
