Email-Worm.JS.Gigger
Email-Worm.JS.Gigger is a fraudulent infection used for the purpose of malware distribution. PC Antispyware 2010, a rogue anti-spyware application, will state that a computer has been infected with Email-Worm.JS.Gigger and that the only solution is to purchase and install the fake spyware remover in order to combat the fictitious worm.
File System Details
Email-Worm.JS.Gigger may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Program Files%\PC_Antispyware2010\htmlayout.dll | |
| 2. | %Program Files%\PC_Antispyware2010\Uninstall.exe | |
| 3. | %Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcr80.dll | |
| 4. | %Program Files%\PC_Antispyware2010\AVEngn.dll | |
| 5. | %Program Files%\PC_Antispyware2010\pthreadVC2.dll | |
| 6. | %Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcp80.dll | |
| 7. | %UserProfile%\Application Data\jugifyryve.exe | |
| 8. | %Program Files%\Common Files\sahaso.bat | |
| 9. | %Program Files%\PC_Antispyware2010\PC_Antispyware2010.exe | |
| 10. | %Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcm80.dll | |
| 11. | %Documents and Settings%\All Users\Documents\ekenubes.com | |
| 12. | %Program Files%\Common Files\jatikysup._dl | |
| 13. | %Program Files%\Common Files\zotys.bin | |
| 14. | %Program Files%\PC_Antispyware2010\wscui.cpl | |
| 15. | %Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT | |
| 16. | %WINDOWS%\hoxigawax.inf | |
| 17. | %WINDOWS%\qynomikov.bin | |
| 18. | %WINDOWS%\system32\_scui.cpl | |
| 19. | %Documents and Settings%\All Users\Application Data\pybisezyr.db | |
| 20. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC_Antispyware2010.lnk | |
| 21. | %UserProfile%\Cookies\zebav.pif | |
| 22. | %UserProfile%\Local Settings\Application Data\xoqupuwytu._dl | |
| 23. | %UserProfile%\Start Menu\Programs\PC_Antispyware2010\Uninstall.lnk | |
| 24. | %Program Files%\Common Files\hubeweqa.lib | |
| 25. | %Program Files%\PC_Antispyware2010\PC_Antispyware2010.cfg | |
| 26. | %Program Files%\PC_Antispyware2010\data\daily.cvd | |
| 27. | %WINDOWS%\akudyta.lib | |
| 28. | %WINDOWS%\nuxojih.scr | |
| 29. | %WINDOWS%\yfoneby.db | |
| 30. | %WINDOWS%\system32\qebykiti.dl | |
| 31. | %Documents and Settings%\All Users\Documents\icosagula.reg | |
| 32. | %UserProfile%\Cookies\yqeqaranym.vbs | |
| 33. | %UserProfile%\Desktop\PC_Antispyware2010.lnk | |
| 34. | %UserProfile%\Start Menu\Programs\PC_Antispyware2010\PC_Antispyware2010.lnk | |
| 35. | %Program Files%\Common Files\aqamodero.dat | |
| 36. | %Program Files%\Common Files\ofyxodaqa.dat | |
| 37. | %Program Files%\PC_Antispyware2010 | |
| 38. | %Program Files%\PC_Antispyware2010\data | |
| 39. | %Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest | |
| 40. | %WINDOWS%\kyci.dl | |
| 41. | %WINDOWS%\seni.reg | |
| 42. | %WINDOWS%\system32\cocefezyj.dl | |
| 43. | %Documents and Settings%\All Users\Application Data\ulycozoho._dl | |
| 44. | %UserProfile%\Cookies\ajeby.reg | |
| 45. | %UserProfile%\Desktop\_scui.cpl.txt | |
| 46. | %UserProfile%\Start Menu\Programs\PC_Antispyware2010 |
Registry Details
Email-Worm.JS.Gigger may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Control Panel\don't load "scui.cpl"
HKEY_LOCAL_MACHINE\SOFTWARE\PC_Antispyware2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "PC Antispyware 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC_Antispyware2010
HKEY_CURRENT_USER\Control Panel\don't load "wscui.cpl"
