Content

Adware-ZangoSA

Type
Program
SubType
Adware
Discovery Date
06/14/2005
Length
Varies
Minimum DAT
4513 (06/14/2005)
Updated DAT
5269 (04/08/2008)
Minimum Engine
5.1.00
Description Added
06/14/2005
Description Modified
01/29/2006 8:30 PM (PT)
Risk Assessment
Corporate User
N/A
Home User
N/A

Tab Navigation

Characteristics

McAfee AVERT™ recognizes that this may have legitimate uses in contexts where an authorized administrator has knowingly installed this application. If you agreed to a license agreement for this, or another bundled application, you may have legal obligations with regard to removing this software, or using the host application without this software. Please contact the software vendor for further information.

See http://vil.nai.com/vil/DATReadme.asp  for a list of Program detections added to the DATs.

See http://vil.nai.com/vil/pups/configuration.htm for information about how to enable, disable, and exclude detection of legitimately installed programs.

This is a program that when active on a computer, can display pop-up advertising, and may also redirect browsers to websites controlled by the makers of this program. The EULA also allows updates and further programs to be installed on a computer running this application.

Various versions of this program may create one or more of the following entries in the Windows Registry:

  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\ CurrentVersion\Run\zango
  • HKEY_LOCAL_MACHINE\Software\zango
  • HKEY_CLASSES_ROOT\ZangoInstaller.ZangoInstaller
  • HKEY_CURRENT_USER\ZangoInstaller.ZangoInstaller
  • HKEY_CLASSES_ROOT\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}
  • HKEY_CLASSES_ROOT\TypeLib\{FF0312E0-F60C-4109-94B8-0A56458E43B}

When run, it may contact one or more of the following sites to download updates and advertising banners:

  • ping.180solutions.com
  • config.180solutions.com
  • bis.180solutions.com
  • downloads.180solutions.com
  • tv.180solutions.com

While the uninstaller removes the main application, at least one of the versions does not clean up the registered ZangoInstaller browser helper objects from %Windir%\Downloaded Program Files and the Windows Registry.

Symptoms

N/A This is not a virus or trojan.

Method of Infection

N/A This is not a virus or trojan.

Variants

Variants

    N/A

All Information

Overview -

This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

Aliases

  • Adware-Zango
  • Adware-ZangoSA

Characteristics

Characteristics -

McAfee AVERT™ recognizes that this may have legitimate uses in contexts where an authorized administrator has knowingly installed this application. If you agreed to a license agreement for this, or another bundled application, you may have legal obligations with regard to removing this software, or using the host application without this software. Please contact the software vendor for further information.

See http://vil.nai.com/vil/DATReadme.asp  for a list of Program detections added to the DATs.

See http://vil.nai.com/vil/pups/configuration.htm for information about how to enable, disable, and exclude detection of legitimately installed programs.

This is a program that when active on a computer, can display pop-up advertising, and may also redirect browsers to websites controlled by the makers of this program. The EULA also allows updates and further programs to be installed on a computer running this application.

Various versions of this program may create one or more of the following entries in the Windows Registry:

  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\ CurrentVersion\Run\zango
  • HKEY_LOCAL_MACHINE\Software\zango
  • HKEY_CLASSES_ROOT\ZangoInstaller.ZangoInstaller
  • HKEY_CURRENT_USER\ZangoInstaller.ZangoInstaller
  • HKEY_CLASSES_ROOT\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}
  • HKEY_CLASSES_ROOT\TypeLib\{FF0312E0-F60C-4109-94B8-0A56458E43B}

When run, it may contact one or more of the following sites to download updates and advertising banners:

  • ping.180solutions.com
  • config.180solutions.com
  • bis.180solutions.com
  • downloads.180solutions.com
  • tv.180solutions.com

While the uninstaller removes the main application, at least one of the versions does not clean up the registered ZangoInstaller browser helper objects from %Windir%\Downloaded Program Files and the Windows Registry.

Symptoms

Symptoms -

N/A This is not a virus or trojan.

Method of Infection

Method of Infection -

N/A This is not a virus or trojan.

Removal -

Removal -

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Variants

Variants -

    N/A