DailyWinner

· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Risks ·
· Detection and Removal ·
· Research ·

Overview

Summary:

 DailyWinner is an Internet Explorer Browser Helper Object that opens pop-under advertising on targeted sites.

Alias:

 InvisiblePop, after the software's internal object name.

Category:

Browser Helper Object: (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page.

Toolbar: A group of buttons which perform common tasks. A toolbar for Internet Explorer is nomally located below the menu bar at the top of the form. Toolbars may be created by Browser Helper Objects.

Similar Pests:

 Browser Helper Object · Toolbar

Origins

Group:

 DailyWinner.net

Vendor:

 DailyWinner.net

By This Group:

 DailyWinner Prize Bar ·

URL:

 http://www.dailywinner.net

Date of Origin:

 July, 2004

Distribution

Distribution:

 Known to be installed by FavoriteMan.

Prevalence:
  • DailyWinner: < 0.00005%
    • More Info

    Clot Factor:
  • DailyWinner: 7

    • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Growth:
  • DailyWinner: Insufficient data to report growth
    		•

    Operation

    Advertising:

    		 Yes. When one of site in a predetermined list is visited, it contacts its controlling servers at dailywinner.net, which may open an advertisement.

    Storage Required:
  • DailyWinner: at least 85 KB
    		•

    Browser Performance:

    		 Likely to slow performance of Internet Explorer.

    Risks

    Privacy Issues:

    		 Some: the URL of the site visited is passed to the controlling servers, which set a cookie that could allow user tracking across sites. However at the time of writing, this is only a session cookie, which will be lost when IE is restarted.

    Security Issues:

    		 No.

    Stability Issues:

    		 No.

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.

    Manual Removal:

    There is no uninstall feature.

    Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:

    cd "%WinDir%\System"
    regsvr32 /u veg32.dll
    Restart Windows and you should be able to delete the veg32.dll file (which is the program itself) and the print32.dll file (a settings file used by it) in the System folder. (The System folder can be found in the Windows folder; it is called 'System32' on Windows NT/2000/XP, and just 'System' on Windows 95/98/Me.)

    Unregister DLLs:

    Unregister these DLLs with Regsvr32, then reboot:

    Clean Registry:

    Remove these registry items (if present) with RegEdit:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:
  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
    		•

    Research By:
  • Andrew Clover
  • PestPatrol's Pest Research Center
    		•

    Last Revised:

    		 April 15, 2005