Content

WStudio.dll

Type
Program
SubType
Application extension
Discovery Date
12/10/2007
Minimum DAT
5182 (12/10/2007)
Updated DAT
5182 (12/10/2007)
Minimum Engine
5.1.00
Description Added
12/10/2007
Description Modified
01/04/2008 4:45 AM (PT)

Tab Navigation

Characteristics

This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

McAfee(R) Avert Labs recognizes that this program may have legitimate  uses in contexts where an authorized administrator has knowingly installed this application.  If you agreed to a license agreement for this, or another bundled application, you may have legal obligations with regard to removing this software, or using the host application without this software.   Please contact the software vendor for further information.

See http://vil.nai.com/vil/pups/configuration.htm for information about how to enable, disable, and exclude detection of legitimately installed programs.

Distribution

This is not a virus or a trojan.  It is detected as a "potentially unwanted program."  It is a search toolbar and direct-marketing adware application that generates pop-up advertisements while browsing the web.

The program is responsible for redirecting search queries and error pages in order to show advertisements that appear to depend on search keywords and URL data. Default address bar searches and 404 errors are redirected through page-not-found.net, although there is a checkbox during the installation where this can be disabled.

System Changes

The program is also responsible on setting Internet Explorer home page to

  • http :// my. weatherstudio . com / dp / startpage ? src _ id =XXX

Also installed the following toolbar

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar" "WeatherStudio Toolbar"

With the following registry keys

  • CLSID\\{15757333-2BCA-4B77-A807-D0955132F812}
  • CLSID\\{6F45AEA2-9C81-4832-8390-7134102B8DE5}
  • CLSID\\{7C2FC77A-AF76-4A75-AC16-B02A13829F34}
  • CLSID\\{A7FDE125-CEBE-400E-8F4D-D2C0708B7D70}
  • CLSID\\{FFDD804F-A7F8-4395-93D2-66A85DA2BDAB}
  • SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{6F45AEA2-9C81-4832-8390-7134102B8DE5}
  • SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{FFDD804F-A7F8-4395-93D2-66A85DA2BDAB}

Removal

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Use the ADD/REMOVE Programs Control Panel in Windows to remove this program.

Aliases

Aliases

    N/A