Description

DailyWinner is an Internet Explorer Browser Helper Object that opens pop-under advertising on targeted sites.

Also known as

InvisiblePop, after the software's internal object name.

Distribution

Known to be installed by the FavoriteMan parasite.

What it does

Advertising

Yes. When one of site in a predetermined list is visited, it contacts its controlling servers at dailywinner.net, which may open an advert.

Privacy violation

Some: the URL of the site visited is passed to the controlling servers, which set a cookie that could allow user tracking across sites. However at the time of writing, this is only a session cookie, which will be lost when IE is restarted.

Security issues

No.

Stability problems

No.

Removal

There is no uninstall feature. It is not yet targeted by Ad-Aware or Spybot S&D at the time of writing.

Manual removal

Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u veg32.dll

Restart Windows and you should be able to delete the veg32.dll file (which is the program itself) and the print32.dll file (a settings file used by it) in the System folder. (The System folder can be found in the Windows folder; it is called 'System32' on Windows NT/2000/XP, and just 'System' on Windows 95/98/Me.)