Signature Detail
Short Name |
SPYWARE:GM:SAH-CASHBACK |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SPYWARE |
Keywords |
Spyware Generic Malware Shopathomeselect Cashback |
Release Date |
2005/04/13 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SPYWARE: Shopathomeselect-Cashback
This signature detects the runtime behavior of spyware ShopAtHomeSelect-CashBack, which is implemented as a Winsock 2 Layered Service Provider (LSP) to redirect site visits. This spyware tracks user activity and sends identifying information back to its controlling servers. It also downloads and installs code from its controlling server.
Extended Description
None
References