BrowserModifier.WebEnhancementsMedia

BrowserModifier.WebEnhancementsMedia is a browser modifier first released on 14 June 2011. This harmful browser modifier will display ads on a user’s Facebook page, and enables the user to alter the background of Facebook. It may also install itself as a browser helper object, and spy on the user’s PC activities.

Because of this threat’s stealth intrusion, users will find it difficult to detect and remove BrowserModifier.WebEnhancementsMedia from the system without some type of help. However there are some symptoms to be on the lookout for which will indicate BrowserModifier.WebEnhancementsMedia’s presence on the system, such as the following files on the system:

BrowserModifier.WebEnhancementsMedia will also display many ads on Facebook which is not governed by the actual Facebook site. Clicking on these ads may direct the user to dangerous sites carrying harmful malware and spyware infections. BrowserModifier.WebEnhancementsMedia will try to seem appealing to the user as it allows the user to change his Facebook background, but users are warned to never allow this threat on the system and to instead delete BrowserModifier.WebEnhancementsMedia upon detection.

Upon installation, the browser modifier will create the following directory:

%ProgramFiles%\WebEnhancements

It may also create these files on the system:

%ProgramFiles%\WebEnhancements\WebEnhancements.dll - BHO component
%ProgramFiles%\WebEnhancements\WebEnhancements.xpi - Firefox extension
%ProgramFiles%\WebEnhancements\Uninstall.exe - an uninstaller

The threat may also create the following files on the system in order to create a Firefox extension.

chrome.manifest
install.rdf
content\
ff-overlay.xul
overlay.js
jquery-1.3.2_nd.js
myscript.js

Once installed in Internet Explorer, BrowserModifier.WebEnhancementsMedia will be seen in the manage Add-ons window which is accessible from the Tools menu. It has also been noted that this threat comes bundled with the following applications:

Installmonetizer
Clickcoupon
Hotbar detected as Adware:Win32/Hotbar
Babylon
Real Player
With these bundlings the user may find the following directories on their machine:
Click Coupon
Search Dock
Viasheep Games

In order to limit the damage BrowserModifier.WebEnhancementsMedia will be able to cause your PC, and to restore your system’s security and privacy it is recommended that you remove BrowserModifier.WebEnhancementsMedia from the system using a properly functioning security tool which will also offer adequate future protection against similar threats.