|
· Overview ·
|
Overview |
|
Summary: |
Aornum is a task started with Windows which keeps in contact with its controlling servers, combined with an IE Browser Helper Object. |
Alias: |
Adware.Aornum, iWon Plus, Ornum (its folder name in Program Files) |
See Also: |
IWon |
Category: |
Browser Helper Object: (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page. Adware: Software that displays popup/popunder ads when the primary user interface is not visible or which do not appear to be assocaited with the product. Toolbar: A group of buttons which perform common tasks. A toolbar for Internet Explorer is nomally located below the menu bar at the top of the form. Toolbars may be created by Browser Helper Objects. |
Similar Pests: |
Browser Helper Object · Adware · Toolbar |
Origins |
|
Group: |
IWon.com |
Vendor: |
According to Symantec (http://www.symantec.com/avcenter/venc/data/adware.aornum.html), Aornum is published by IWon.com. However, according to Tim Ogilvie, VP, Search & Syndication, The Excite Network"iWon.com stopped distributing Aornum over a year ago. The product was tested for a very short period of time, and was discontinued with negative consumer reaction." |
Date of Origin: |
January, 2002 |
Distribution |
|
Distribution: |
Is included in more recent bundles of iWon software including the iWon toolbar and Prize Machine. http://prizemachine.games.iwon.com/pm3_splash.html |
Prevalence: |
|
Clot Factor: |
The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone. |
Growth: |
|
Operation |
|
Platform: |
Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me |
Advertising: |
Yes. Opens pop-up ads while browsing with IE. |
Browser Performance: |
Likely to slow performance of Internet Explorer. |
Risks |
|
Privacy Issues: |
During registration, iWon collects personal information including your name, address, email address, birth date, gender, zip code and phone number. Aornum passes opaque strings of characters to its servers. After providing iWon with this information, you are no longer anonymous... From time to time, iWon may collect additional personal and non-personal information about you. This may include:
|
Privacy Policy: |
http://www.iwon.com/home/companyinfo/privacy/privacy_overview/0,11882,,00.html |
Security Issues: |
Aornum downloads and executes code signed by iWon, for update purposes. |
Stability Issues: |
None known, though it will try to connect to iWon when you open a file in an Explorer window, which is annoying if you have auto-connect. May interfere with scandisk and defrag. |
Detection and Removal |
|
Automatic Removal: |
|
Manual Removal: |
Go to the Control Panel's Add/Remove Programs option and remove 'iWon Plus'. You will probably also want to remove the 'iWon EZ Setup' entry which is the installer (allowing iWon-signed code to be installed from a web page) and the 'iWon Search Assistant' which monitors terms entered into search engines and hijacks IE search settings. (The 'iWon co-pilot' toolbar is not known to be harmful, you can choose to keep or remove it.) Next, open the registry (Start->Run->regedit) and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the 'Aornum' value. Now reboot and you should be able to delete the 'Ornum' folder in Program Files, and anything in the 'iWon' folder you didn't keep. |
| Stop Running Processes: Kill these running processes with Task Manager: | |
| Unregister DLLs: Unregister these DLLs with Regsvr32, then reboot: | |
| Clean Registry: Remove these registry items (if present) with RegEdit: | |
| Remove Files: Remove these files (if present) with Windows Explorer: | |
| Remove Directories: Remove these directories (if present) with Windows Explorer: | |
Research |
|
More Info: |
|
Research By: |
|
Last Revised: |
April 25, 2005 |