Monday, December 1, 2008

ScreenSaver.Waterfalls Adware

Click here to remove ScreenSaver.Waterfalls malware
ScreenSaver.Waterfalls description:
ScreenSaver.Waterfalls Category:Adware

Detection ScreenSaver.Waterfalls :

ScreenSaver.Waterfalls Files:
[%APPDATA%]\YourScreen\Media\waterfalls_ico.ico
[%DESKTOP%]\free animated desktop wallpaper.lnk
[%DESKTOP%]\free ringtones!.lnk
[%DESKTOP%]\Upgrade Living 3D Waterfalls!.lnk
[%INTERNET_CACHE%]\Content.IE5\P3Y0D821\ClickToFindandFixErrors_Intl[1].ico
[%PROGRAM_FILES%]\3D-Relax\Living Marine Aquarium 2.0 trial\trioService.exe
[%PROGRAM_FILES%]\Free Offers from Freeze.com\1775.url
[%PROGRAM_FILES%]\Free Offers from Freeze.com\2342.url
[%PROGRAM_FILES%]\free offers from freeze.com\flycell1.ico
[%PROGRAM_FILES%]\free offers from freeze.com\flycell1.url
[%PROGRAM_FILES%]\free offers from freeze.com\partypoker.ico
[%PROGRAM_FILES%]\free offers from freeze.com\partypoker.url
[%PROGRAM_FILES%]\free offers from freeze.com\registrycleaner.ico
[%PROGRAM_FILES%]\free offers from freeze.com\registrycleaner.url
[%PROGRAM_FILES%]\Free Offers from Freeze.com\spcasino_aug.ico
[%PROGRAM_FILES%]\free offers from freeze.com\spcasino_gen.ico
[%PROGRAM_FILES%]\free offers from freeze.com\spcasino_gen.url
[%PROGRAM_FILES%]\free offers from freeze.com\wfallsaw.ico
[%PROGRAM_FILES%]\free offers from freeze.com\wfallsaw.url
[%PROGRAM_FILES%]\Free Offers from RI Soft Systems\wfallsaw.ico
[%PROGRAM_FILES%]\ScreenSaver.com\Living Waterfalls Full\wfalls.ico
[%SYSTEM%]\click-005.ico
[%SYSTEM%]\ClickToFindandFixErrors.ico
[%SYSTEM%]\ClickToFindandFixErrorsIntl.ico
[%SYSTEM%]\ClickToFindandFixErrors_2.ico
[%SYSTEM%]\ClickToFindandFixErrors_4.ico
[%SYSTEM%]\ClickToFindandFixErrors_Intl.ico
[%SYSTEM%]\ClickToFindandFixErrors_RON.ico
[%SYSTEM%]\ClickToFindandFixErrors_RON_Intl.ico
[%SYSTEM%]\ClickToFindandFixErrors_US.ico
[%SYSTEM%]\FreezeScreenSaver.exe
[%WINDOWS%]\Living 3D Waterfalls.scr
[%DESKTOP%]\download 173 free casino games.lnk
[%DESKTOP%]\free animated desktop wallpaper.lnk
[%DESKTOP%]\free ringtones!.lnk
[%DESKTOP%]\partypoker.com.lnk
[%DESKTOP%]\Upgrade Living 3D Waterfalls!.lnk
[%DESKTOP%]\waterfalls3cfree.exe
[%APPDATA%]\YourScreen\Media\waterfalls_ico.ico
[%DESKTOP%]\free animated desktop wallpaper.lnk
[%DESKTOP%]\free ringtones!.lnk
[%DESKTOP%]\Upgrade Living 3D Waterfalls!.lnk
[%INTERNET_CACHE%]\Content.IE5\P3Y0D821\ClickToFindandFixErrors_Intl[1].ico
[%PROGRAM_FILES%]\3D-Relax\Living Marine Aquarium 2.0 trial\trioService.exe
[%PROGRAM_FILES%]\Free Offers from Freeze.com\1775.url
[%PROGRAM_FILES%]\Free Offers from Freeze.com\2342.url
[%PROGRAM_FILES%]\free offers from freeze.com\flycell1.ico
[%PROGRAM_FILES%]\free offers from freeze.com\flycell1.url
[%PROGRAM_FILES%]\free offers from freeze.com\partypoker.ico
[%PROGRAM_FILES%]\free offers from freeze.com\partypoker.url
[%PROGRAM_FILES%]\free offers from freeze.com\registrycleaner.ico
[%PROGRAM_FILES%]\free offers from freeze.com\registrycleaner.url
[%PROGRAM_FILES%]\Free Offers from Freeze.com\spcasino_aug.ico
[%PROGRAM_FILES%]\free offers from freeze.com\spcasino_gen.ico
[%PROGRAM_FILES%]\free offers from freeze.com\spcasino_gen.url
[%PROGRAM_FILES%]\free offers from freeze.com\wfallsaw.ico
[%PROGRAM_FILES%]\free offers from freeze.com\wfallsaw.url
[%PROGRAM_FILES%]\Free Offers from RI Soft Systems\wfallsaw.ico
[%PROGRAM_FILES%]\ScreenSaver.com\Living Waterfalls Full\wfalls.ico
[%SYSTEM%]\click-005.ico
[%SYSTEM%]\ClickToFindandFixErrors.ico
[%SYSTEM%]\ClickToFindandFixErrorsIntl.ico
[%SYSTEM%]\ClickToFindandFixErrors_2.ico
[%SYSTEM%]\ClickToFindandFixErrors_4.ico
[%SYSTEM%]\ClickToFindandFixErrors_Intl.ico
[%SYSTEM%]\ClickToFindandFixErrors_RON.ico
[%SYSTEM%]\ClickToFindandFixErrors_RON_Intl.ico
[%SYSTEM%]\ClickToFindandFixErrors_US.ico
[%SYSTEM%]\FreezeScreenSaver.exe
[%WINDOWS%]\Living 3D Waterfalls.scr
[%DESKTOP%]\download 173 free casino games.lnk
[%DESKTOP%]\free animated desktop wallpaper.lnk
[%DESKTOP%]\free ringtones!.lnk
[%DESKTOP%]\partypoker.com.lnk
[%DESKTOP%]\Upgrade Living 3D Waterfalls!.lnk
[%DESKTOP%]\waterfalls3cfree.exe

ScreenSaver.Waterfalls Folders:
[%COMMON_PROGRAMS%]\Freeze.com\Living 3D Waterfalls
[%PROGRAM_FILES%]\Freeze.com\Living 3D Waterfalls
[%COMMON_STARTMENU%]\Programs\Freeze.com\Living 3D Waterfalls

ScreenSaver.Waterfalls Registry Keys:
HKEY_CURRENT_USER\software\screensaver.com\living 3d waterfalls
HKEY_LOCAL_MACHINE\software\freeze.com\living 3d waterfalls screensaver
HKEY_LOCAL_MACHINE\software\triodesign\living 3d waterfalls 3.0 free

ScreenSaver.Waterfalls Registry Values:
HKEY_LOCAL_MACHINE\software\freeze.com\service
HKEY_LOCAL_MACHINE\software\freeze.com\service

Removing ScreenSaver.Waterfalls:

you can run trial version of ExterminateIt, or remove ScreenSaver.Waterfalls manually.


To completely manually remove ScreenSaver.Waterfalls malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ScreenSaver.Waterfalls.


Also Be Aware of the Following Threats:
Removing NetControl Spyware
Hell.Raiser Trojan Symptoms
XSRemover Trojan Information