The Purityscan family are adware programs, that downloads and displays advertisements on your computer.
Usually copies itself to the %Windir%\Application Data folder as (wbta.exe, daas.exe ...)
Under one of the registry keys:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\ Software\Microsoft\Windows\CurrentVersion\Run
creates an entry to start with the Windows System.
twhe=%Windir%\Application Data\wbta.exe
Aipt=%Windir%\Application Data\daas.exe
...
When browsing Web sites, it dispalys pop-up ads.
Contacts with a remote server, and sends informations about System and self status there.
The manual removal of the program can be accomplished be deleting the created file and restoring the modified registry setting.
|