CommonName

Classification

Category :

Spyware

Type :

Data Miner

Aliases :

XSPN

Summary

CommonName builds software that hijacks the Internet Explorer search feature. Searches are redirected to their site where results and usage are monitored. Search results displayed by CommonName are defined by a database of keywords. Keywords are sold for companies to direct traffic to their website.

Removal

Based on the settings of your F-Secure security product, it may block the file from running, move it to the quarantine where it cannot spread or cause harm, or ask you to select an action.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

CommonName is a company that sells search keywords utilized by their own software. The software hijacks the search feature in Internet Explorer and directs search queries to their site. While using the service, information about what is searched for and clicked are collected.

CommonName's search results are defined by a set list of rules. Other companies can purchase keywords to direct searches to their site.

The software comes with a EULA and a privacy policy clause. The privacy policy does not provide sufficient information. This is what is stated:

i. does not collect any personal information

ii. does not collect data by monitoring your behavior

iii. does not attempt to connect to the Internet if you are not connected

iv. does not bundle with any other software

v. does include an uninstaller

There is no information about what is collected and how it is treated.

CommonName has an additional service called Identity. To use Identity, the user must disclose their e-mail address to register. The username then functions as a keyword to simplify navigation to a personal webpage or as an alias for an e-mail address. A registered user can also store online bookmarks and other personal information. How such information is handled and used is unknown.

Each installation is associated with a unique id. The software runs in stealth from the user.