Warning message... Link to action
Read our in-depth analysis of a new high-volume campaign that marked the resurgence of notorious malware-as-a-service Hawkeye Keylogger. Read the blog post
Aliases: No associated aliases
Windows Defender Antivirus detects and removes this unwanted software.
This browser modifier can change your web browser settings without adequate consent.
It is usually installed through bundlers such as SoftwareBundler:Win32/Mizenota, SoftwareBundler:Win32/Prepscram, SoftwareBundler:Win32/InstallMonster, SoftwareBundler:Win32/ICLoader and SoftwareBundler:Win32/Dartsmound.
This threat is part of a suite of malware and unwanted software families that is also called "Fireball". Read about this threat group in the Windows Security blog:
This threat is an unwanted software. An unwanted software is a program that alters your Windows experience without your consent or control. We use a set of evaluation criteria to determine what programs are classified as unwanted software. As the software ecosystem evolves, so do our evaluation criteria. To learn more, read these blog entries:
- Protecting customers from being intimidated into making an unnecessary purchase
- Cleaners ought to be clean (and clear)
- A brief discourse on ‘Changing browsing experience’
- Keeping browsing experience in users’ hands
- Keeping Browsing Experience in Users’ Hands, an Update...
- Cleaning up misleading advertisements
- Adware: A new approach