ThreatExpert's Statistics for not-a-virus:AdWare.Win32.CashPlus.r [Kaspersky Lab]:

not-a-virus:AdWare.Win32.CashPlus.r [Kaspersky Lab] is also known as:

Threat Alias	Number of Incidents
Generic PUP.x [McAfee]	1
Mal/Generic-A [Sophos]	1
not-a-virus:AdWare.Win32.CashPlus [Ikarus]	1
Trojan.Vundo [Symantec]	1
Win-Trojan/Xema.variant [AhnLab]	1

not-a-virus:AdWare.Win32.CashPlus.r [Kaspersky Lab] has the following possible country of origin:

Origin		Number of Incidents
	Republic of Korea	1

not-a-virus:AdWare.Win32.CashPlus.r [Kaspersky Lab] is known to be created as:

%Temp%\026800_u.exe

%Temp%\027143_u.exe

Note: %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).