SpywareIsolator Description

SpywareIsolator is a rogue anti-spyware application. SpywareIsolator is usually downloaded and installed onto your computer system by a Trojan, exploiting browser security vulnerabilities. Once SpywareIsolator is installed, it will perform a fraudulent scan that will result in exaggerated and extremely intrusive error messages. In other words, SpywareIsolator will try to trick credible computer users into buying the “full version” of the program. SpywareIsolator is a scam, and the only thing it will do is slow you computer down notably. It is strongly recommended to dispose of SpywareIsolator as soon as possible.

Type: Rogue AntiSpyware Programs

Automatic Detection of SpywareIsolator

SpywareIsolator Technical Report

As new SpywareIsolator details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following SpywareIsolator files with its MD5s were created in the system:

SpywareIsolator has typically the following processes in memory:

• spywareisolator.exe
• SpywareIsolator_Installer[1].exe
• tmpwisc1.exe

SpywareIsolator created the following directories, files, paths:

• %AllUsersProfile%\Start Menu\Programs\SpywareIsolator
• %ProgramFiles%\SpywareIsolator

SpywareIsolator creates the following registry entries:

• HKEY_CURRENT_USER\software\spywareisolator
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 displayname
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 inno setup: deselected tasks
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 inno setup: setup version
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 installlocation
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 publisher
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 urlinfoabout
• HKEY_CURRENT_USER\software\microsoft\windows\shellnoroam\muicache c:\program files\spywareisolator\spywareisolator.exe
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 inno setup: app path
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 inno setup: selected tasks
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 installdate
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 norepair
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 uninstallstring
• spywareisolator
• HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run spywareisolator
• HKEY_CURRENT_USER\software\spywareisolator fr
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 helplink
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 inno setup: icon group
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 inno setup: user
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 nomodify
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 quietuninstallstring
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spywareisolator_is1 urlupdateinfo

Important Article Disclaimer