Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Potentially Unwanted Programs
The websites www.iwon.com and retrogamer.iwon.com have toolbars called IWon and Retrogamer that contain Potentially Unwanted Programs (PUPs). Potentially Unwanted Programs are applications that contain adwares, toolbars or web browser hijackers. These programs tend to be difficullt to remove after they have been installed on your computer.
This is how the Iwon toolbars looks:
The IWon and Retrogamer toolbars installation files were scanned at virustotal.com and 11 out of 46 antivirus software detected a threat. The following threats were found:
File names: Retrogamer.exe and iWon.exeDetection: 11 / 46Analysis date: 2013-03-24Antivirus Threat--------------------------AhnLab-V3 PUP/Win32.FunWebAvast Win32:FunWeb-J [PUP]AVG ZangoComodo ApplicUnwnt.Win32.AdWare.FunWeb.DAESET-NOD32 Win32/AdInstallerF-Prot W32/MyWeb.GFortinet Riskware/MyWebSearchKaspersky not-a-virus:WebToolbar.Win32.MyWebSearch.genKingsoft Win32.Troj.Generic.a.(kcloud)TrendMicro-HouseCall TROJ_GEN.F47V1210VIPRE MyWebSearch.J (v) (not malicious)
File names: Retrogamer.exe and iWon.exeDetection: 11 / 46Analysis date: 2013-03-24
Antivirus Threat--------------------------AhnLab-V3 PUP/Win32.FunWebAvast Win32:FunWeb-J [PUP]AVG ZangoComodo ApplicUnwnt.Win32.AdWare.FunWeb.DAESET-NOD32 Win32/AdInstallerF-Prot W32/MyWeb.GFortinet Riskware/MyWebSearchKaspersky not-a-virus:WebToolbar.Win32.MyWebSearch.genKingsoft Win32.Troj.Generic.a.(kcloud)TrendMicro-HouseCall TROJ_GEN.F47V1210VIPRE MyWebSearch.J (v) (not malicious)
If you have already installed these toolbars, click here to use AdwCleaner to remove the Potentially Unwanted Programs that were installed.. AdwCleaner is a very small program and doesn't require any installation.
Based on the information that we were able to gather, we do not recommend installing the IWon and Retrogamer toolbars.
2
A lot of these software with Potentially Unwanted Programs are being advertised on a lot of legitimate Advertising Networks.
The RetroGamer ad is displayed on the Yahoo Mail screen after deleting spam or emptying trash. I found this when I was searching to determine whether it was a safe site for Galaga or other games. Why would Yahoo allow this when it is so problematic? Wait! Yahoo allows someone in Kuwait to sign onto MY email WHILE I AM USING IT!
