Drameset.com
Drameset.com is an untrustworthy website that promotes rogue security applications such as GuardWWW. Drameset.com can only be landed on by victims of Trojan infections related to the website. Drameset.com pretends to be an online system scanner and it even has a GUI similar to that of My Computer to make it look even more legitimate. The scan automatically produces a report of several infections on the system and then it advises the user to purchase the "full version" of GuardWWW. Do not waste your money on GuardWWW and use a reliable anti-spyware tool to remove the browser hijacker behind Drameset.com.
File System Details
Drameset.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\[random].exe | |
| 2. | %Program Files%\GuardWWW Software\GuardWWW\uninstall.exe | |
| 3. | %Program Files%\GuardWWW Software\GuardWWW\GuardWWW.exe | |
| 4. | %Temp%\[random].exe | |
| 5. | %Program Files%\GuardWWW Software\GuardWWW\main_config.xml | |
| 6. | %Documents and Settings%\All Users\Start Menu\Programs\GuardWWW\1 GuardWWW.lnk | |
| 7. | %Program Files%\GuardWWW Software\GuardWWW | |
| 8. | %Documents and Settings%\All Users\Start Menu\Programs\GuardWWW | |
| 9. | %Documents and Settings%\All Users\Start Menu\Programs\GuardWWW\3 Uninstall.lnk | |
| 10. | %Program Files%\GuardWWW Software | |
| 11. | %Documents and Settings%\All Users\Desktop\GuardWWW.lnk | |
| 12. | %Documents and Settings%\All Users\Start Menu\Programs\GuardWWW\2 Homepage.lnk |
Registry Details
Drameset.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GuardWWW
HKEY_LOCAL_MACHINE\SOFTWARE\GuardWWW
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GuardWWW"
HKEY_CURRENT_USER\Software\GuardWWW
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
