Content

Adware-SAHAgent

Type
Program
SubType
Adware
Discovery Date
10/06/2003
Length
varies
Minimum DAT
4297 (10/08/2003)
Updated DAT
6616 (02/10/2012)
Minimum Engine
5.1.00
Description Added
10/28/2003
Description Modified
10/28/2003 2:14 AM (PT)
Risk Assessment
Corporate User
N/A
Home User
N/A

Tab Navigation

Characteristics

This is not a virus nor a trojan. It is a direct-marketing adware application.

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported.  Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

A file called Sahagent.log is dropped in C:\ and records all the visits to merchant websites. This data is recorded by ShopAtHomeSelect servers.

Two new keys are added to the registry:

  • HKEY_LOCAL_MACHINES\Software\Vgroup
  • HKEY_LOCAL_MACHINES\Software\Vgroup\SAHAgent

The detection of this type of file is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7 has also an option, which enables users to detect this kind of program automatically (see below).

Symptoms

N/A This is not a virus or trojan

Method of Infection

N/A This is not a virus or trojan

Variants

Variants

    N/A

All Information

Overview -

This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

Characteristics

Characteristics -

This is not a virus nor a trojan. It is a direct-marketing adware application.

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported.  Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

A file called Sahagent.log is dropped in C:\ and records all the visits to merchant websites. This data is recorded by ShopAtHomeSelect servers.

Two new keys are added to the registry:

  • HKEY_LOCAL_MACHINES\Software\Vgroup
  • HKEY_LOCAL_MACHINES\Software\Vgroup\SAHAgent

The detection of this type of file is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7 has also an option, which enables users to detect this kind of program automatically (see below).

Symptoms

Symptoms -

N/A This is not a virus or trojan

Method of Infection

Method of Infection -

N/A This is not a virus or trojan

Removal -

Removal -

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Variants

Variants -

    N/A