Parasite: TopConverting

This record last updated Tue Sep 20 2005 03:34:15

PLEASE NOTE: Due to the overwhelming extent of this problem and the unbelievable volume of email we have received, we regret that we cannot respond to questions about browser parasites at this time. If you have attempted to contact us about this parasite please accept our apology for not responding. "Thank you's" are always appreciated ;-)

Description

TopConverting is an ActiveX downloader control distributed by topconverting.com/crazywinnings.com, with the filename loader2.ocx or mp3.ocx.

It is not a threat in itself, as once it has been installed it cannot be re-used, but having it is a sign that is was used to install other parasites.

TopConverting has been seen to install at least the following parasites:

It may also install some a desktop game from CrazyWinnings.

Also known as

CrazyWinnings. Loader2, after the ActiveX control name.

Distribution

Installed by an ‘aggressive’ ActiveX drive-by-downloader (reloading until the download is accepted) on unrelated web pages.

Also installed by using IE security holes, lowering security settings so that the software installs automatically, from CoolWebSearch exploits.

What it does

Advertising

No.

Privacy violation

No.

Security issues

No. Once the initial software is downloaded, the installer control sits around doing nothing.

Stability problems

No.

Removal

Open the Downloaded Program Files folder (which you can find inside the Windows folder). Right-click and Remove the entry ‘Loader2 Control’.

Then check your system for other parasites it might have installed.

* Parasite information and detection script by Andrew Clover - www.doxdesk.com, used with permission.

For more information about Scumware, Spyware and Parasites, their sources and their cure, visit our About Parasites page and related Tech Links.

Visit our new services portal at Allen One for a completely new parasite database format, comming November 2005!