Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
818 entries found. Displaying page 9 of 41.
Updated on Mar 09, 2009
Trojan:Win32/Wintrim.A is a trojan that displays pop-up advertisements depending on the user's keywords and browsing history. It can also monitor the user's activities, download applications, and send system information back to a remote server.
Alert level: severe
Updated on Nov 27, 2009
Trojan:Win32/Skintrim.C is the detection for malware belonging to the Win32/Skintrim and Win32/Wintrim families.
Alert level: severe
Updated on Dec 02, 2009
BrowserModifier:Win32/NavExcel is an application that installs an Internet Explorer Browser Helper Object (BHO) or plug-in. It allows a user to conduct searches by typing keywords directly into the browser's address bar. It may also install its own search toolbar.
Alert level: high
Updated on Feb 04, 2010

This program was detected by definitions prior to 1.159.567.0 as it violated the guidelines by which Microsoft identified unwanted software. Based on analysis using current guidelines, the program does not have unwanted behaviors. Microsoft has released definition 1.159.567.0 which no longer detects this program. 

Alert level: high
Updated on Mar 18, 2010

This program was detected by definitions prior to 1.159.567.0 as it violated the guidelines by which Microsoft identified unwanted software. Based on analysis using current guidelines, the program does not have unwanted behaviors. Microsoft has released definition 1.159.567.0 which no longer detects this program. 

Alert level: moderate
Updated on May 17, 2010
Trojan:Win32/BHO.AH is a trojan component installed by TrojanDropper:Win32/Henbang.A. The trojan runs as part of an adware application that uses a Web browser helper object (BHO) to display advertisements based on Web surfing habits.
Alert level: severe
Updated on May 20, 2010

This program was detected by definitions prior to 1.175.243.0 as it violated the guidelines by which Microsoft identified unwanted software. Based on analysis using current guidelines, the program does not have unwanted behaviors.

Alert level: moderate
Updated on Aug 02, 2010
SoftwareBundler:Win32/MediaPass is bundled with a number of adware components such as Adware:Win32/Dymanet. The advertising may monitor Internet activity; these installers also contain an ID that is used to trigger/generate payment to an affiliate of the company.
Alert level: high
Updated on Nov 02, 2010
TrojanDownloader:Win32/Buzus.C is a trojan that downloads and executes arbitrary files from a remote web server with the IP address 203.179.145.2.
Alert level: severe
Updated on Aug 15, 2011

This program was detected by definitions prior to 1.159.567.0 as it violated the guidelines by which Microsoft identified unwanted software. Based on analysis using current guidelines, the program does not have unwanted behaviors. Microsoft has released definition 1.159.567.0 which no longer detects this program. 

Alert level: moderate
Updated on Sep 27, 2011

TrojanDownloader:Win32/Adload.DB is a trojan that may connect to specific websites to download components that may generate pop-up advertisements.

Alert level: high
Updated on Jan 23, 2012

Windows Defender Antivirus detects and removes this threat. 

This browser modifier can redirect your web browser to a website named webalta.ru. Webalta can also download and run updates from the website update.webalta.ru.

Alert level: high
Updated on Feb 29, 2012
Worm:Win32/Autorun.AEU is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Feb 26, 2013

Adware:Win32/Gisav is an adware program that displays offers related to your web browsing habits. It can be downloaded from the program's website.

You can use the following scanning and removal tools to detect and remove Adware:Win32/Gisav and other unwanted software from your computer:

When this adware is installed it also creates an uninstaller in Control Panel. However, running this uninstaller causes more unwanted software to be installed on your computer.

After removal, you will also need to remove the browser extensions, as explained in the recovery section below.

We detect Adware:Win32/Gisav because it opens advertisements that appear independently outside the context of the program, website, or other source the advertisements are promoting.

For more information about how and why we identify unwanted software, such as Adware:Win32/Gisav, please see our evaluation criteria resource page.

Alert level: high
Updated on Feb 27, 2013

Adware:Win32/InfoAtoms is an adware program that displays advertisements related to your web browsing habits.

We detect Adware:Win32/InfoAtoms because it inserts advertisements into websites.

Our evaluation criteria resource page has more information on how and why we identify unwanted software.

Alert level: high
Updated on Oct 30, 2013

Windows Defender detects and removes this threat.

This family of malware can do the following:

  • Change your browser settings
  • Download and run files, including other malware

It spreads through software bundlers and download managers, like GoPlayer Download Manager, that advertise free software or games.

Alert level: severe
Updated on Dec 21, 2014

Microsoft security software detects and removes this unwanted software.

This browser modifier makes changes to your Internet browser that you can't control.

It redirects your web browser searches and prevents you from changing your browser settings.

It can be installed on your PC by third-party software installers.

Find out more about how and why we identify unwanted software.

Alert level: high
Updated on Mar 11, 2015

This application was stopped from running on your network because it has a poor reputation. This application can also affect the quality of your computing experience. We have seen this leading to the following potentially unwanted behaviors on PCs:

  • Adds files that run at startup
  • Modifies boot configuration data
  • Modifies file associations
  • Injects into other processes on your system
  • Changes browser settings
  • Adds a local proxy
  • Modifies your system DNS settings
  • Stops Windows Update
  • Disables User Access Control (UAC)

These applications are most commonly software bundlers or installers for applications such as toolbars, adware, or system optimizers. We have observed this application installing software that you might not have intended on your PC.

If you were trying to install an application, you might have downloaded it from a source other than the official product's website.

We usually see this application installed on PCs in the following countries. This list is sorted according to prevalence:

  • United States
  • Russia
  • Brazil
  • Korea
  • France

This detection is part of our extended Potentially Unwanted Application protection feature.

Alert level: severe
Updated on Nov 09, 2015

This application was stopped from running on your network because it has a poor reputation. This application can affect the quality of your computing experience. We have seen this leading to the following potentially unwanted behaviors on PCs:

  • Installs browser extensions

These applications are most commonly software bundlers or installers for applications such as toolbars, adware, or system optimizers. We have observed this application installing software that you might not have intended on your PC.

If you were trying to install an application, you might have downloaded it from a source other than the official product's website.

We usually see this application installed on PCs in the following countries. This list is sorted according to prevalence:

  • Germany
  • United States
  • Austria
  • Hungary
  • Switzerland

This detection is part of our extended Potentially Unwanted Application protection feature.

Alert level: severe
Updated on Jun 29, 2016

This application was stopped from running on your network because it has a poor reputation. This application can also affect the quality of your computing experience. We have seen this leading to the following potentially unwanted behaviors on PCs:

  • Modifies your system DNS settings

These applications are most commonly software bundlers or installers for applications such as toolbars, adware, or system optimizers. We have observed this application installing software that you might not have intended on your PC.

If you were trying to install an application, you might have downloaded it from a source other than the official product's website.

We usually see this application installed on PCs in the following countries. This list is sorted according to prevalence:

  • United States
  • United Kingdom
  • France
  • Germany
  • Italy

This detection is part of our extended Potentially Unwanted Application protection feature.

Alert level: severe