Spywarewebsiteblock.com Description

Spywarewebsiteblock.com is a malicious website that can hijack a web browser application and change settings without permission from the computer user. Spywarewebsiteblock.com, once visited, will display fake warning message and then lead to a page that promotes and sells the Alpha Antivirus rogue anti-spyware program.

Type: Browser Hijackers

How Can You Detect Spywarewebsiteblock.com?

Spywarewebsiteblock.com has typically the following processes in memory:

• %WINDOWS%\system32\NetFilter.exe
• %WINDOWS%\system32\msnaoladdon.dll
• %WINDOWS%\system32\drivers\NDISRD.sys
• %Program Files%\AlphaAV\AlphaAV.exe
• %WINDOWS%\system32\ndisapi.dll

Spywarewebsiteblock.com creates the following registry entries:

• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Alpha Antivirus”
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “AlphaAV”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Alpha Antivirus
• HKEY_LOCAL_MACHINE\Software\Alpha Antivirus
• HKEY_CURRENT_USER\Software\Alpha Antivirus

Important Article Disclaimer