Content

iGetNet

Type
Program
SubType
Win32
Discovery Date
04/15/2003
Minimum DAT
4261 (05/03/2003)
Updated DAT
5089 (08/02/2007)
Minimum Engine
5.1.00
Description Added
05/02/2003
Description Modified
05/05/2003 10:08 AM (PT)

Tab Navigation

Characteristics

This detection is of application type for "potentially unwanted applications", it is not a virus.

The 4260 DATs incorrectly identify iGetNet on a Windows ME file named RSVP.EXE (90,112 bytes). This identification is only seen when VirusScan 7 is configured to scan for "Potentially Unwanted Programs" (configuration screenshot below), or when VirusScan 6.02 is configured to scan with Program heuristics enabled.

The 4261 DAT files were released to correct this detection. This incorrect identification may also be suppressed by configuring VirusScan to not scan for Potentially Unwanted Programs (this is the default setting). This will not affect the scanners ability to detect viruses, trojans, and other malware.

This program is installed by a file called winstart.exe, it installs silently without prompting the user, and there is no uninstall program provided. The purpose of this program is to redirect users to specific sites when they enter certain keywords in the address bar in the Internet Explorer. This program modifies the hosts file to redirect users to the iGetNet site if they try to go to auto.search.msn.com or search.netscape.com. The files bho.dll and rsp.dll are also installed by this program.

The detection of this type of files is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch. Please note that VirusScan 7 has also an option, which enables users to detect this kind of program automatically (see below).

Removal

Potentially Unwanted Applications can be detected with VirusScan 7 and/or the command line scanner with the /PROGRAM switches.

  1. Click the START button
  2. Click RUN
  3. Type COMMAND and hit ENTER
  4. Type:

    c:\progra~1\common~1\networ~1\viruss~1\4.0.xx\scan.exe c: /program /sub

    and hit ENTER.

Users running VirusScan 7 or later can also enable application or joke detection via the configuration option "Find potentially unwanted programs" (Advanced section - see example below), within the VirusScan GUI as shown below:

Corporate Users:

This applies for the On-Access scanner too.

Retail Users:

Contact the program author (origin) for removal instructions.

Aliases

Aliases

    N/A