Spyware.Known_Bad_Sites Description

Spyware.Known_Bad_Sites is able to monitor a victim’s online activities and capture confidential information. Once inside a system, Spyware.Known_Bad_Sites will make changes to hosts file, redirecting a user’s browser to harmful websites each time an attempt is made to access a legitimate website. Spyware.Known_Bad_Sites may redirect its victims to spyware, adware or phishing websites. Spyware.Known_Bad_Sites should be removed with an anti-spyware program to ensure that it is completely removal.

Type: Browser Hijackers

How Can You Detect Spyware.Known_Bad_Sites?

Spyware.Known_Bad_Sites has typically the following processes in memory:

• %System%\kqermpuovi.dll
• %System%\tjhnrruleb.exe

Spyware.Known_Bad_Sites creates the following registry entries:

• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\AvailableVersion]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\tjhnrruleb]
• [HKEY_CURRENT_USER\Software\AppDataLow\Software\{3A58855D-8887-2C71-4292-F91334DBC2DB}]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\DownloadInformation]

Important Article Disclaimer