Need help? Ask the community or hire an expert.
Go to Avira Answers
Virus:ADWARE/Solimba.GW
Date discovered:11/06/2013
Type:Adware/Spyware
In the wild:No
Reported Infections:Low to medium
Distribution Potential:Low
Damage Potential:Low
VDF version:7.11.84.26 - Tuesday, June 11, 2013
IVDF version:7.11.84.26 - Tuesday, June 11, 2013

 General Method of propagation:
   • No own spreading routine


Alias:
   •  Eset: MSIL/Solimba.Q potentially unwanted


Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7


Side effects:
   • Downloads a file


Right after execution the following information is displayed:



 Files The following files are created:

– Temporary files that might be deleted afterwards:
   • %Temp%\nsi3.tmp
   • %Temp%\nsi4.tmp

 Registry The following registry key is added:

– [HKCU\Software\Microsoft\Windows\CurrentVersion\Webcheck\Store.1\
   {22445212-D495-01C5-0000-0000E0988F36}]

 Miscellaneous Internet connection:
In order to check for its internet connection the following DNS servers are contacted:
   • api.download**********.com
   • soft**********.org

Description inserted by Wensin Lee on Thursday, June 13, 2013
Description updated by Wensin Lee on Thursday, June 13, 2013

Back . . . .