Threat Search: 

ThreatExpert's Statistics for not-a-virus:AdWare.Win32.Zwangi [Ikarus]:

not-a-virus:AdWare.Win32.Zwangi [Ikarus] is also known as:
Threat AliasNumber of Incidents
Adware-OneStep [McAfee]4
not-a-virus:AdWare.Win32.Zwangi.aa [Kaspersky Lab]3
BrowserModifier:Win32/Zwangi [Microsoft]1
Generic PUP.x!co [McAfee]1
not-a-virus:AdWare.Win32.Zwangi.ae [Kaspersky Lab]1
not-a-virus:AdWare.Win32.Zwangi.dt [Kaspersky Lab]1
not-a-virus:AdWare.Win32.Zwangi.m [Kaspersky Lab]1

not-a-virus:AdWare.Win32.Zwangi [Ikarus] is known to be created as:
%CommonAppData%\wyeke\wyeke127.exe
%ProgramFiles%\seekservice\uninstall.exe
%ProgramFiles%\wyeke\wyeke.exe
%Windir%\temp\nse8.tmp\wyeke.exe
Notes:
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.