Lamebabe.com
Lamebabe.com or Lamebabe.net is a criminal website that promotes Antivirus Action - a fake security application. Antivirus Action will scare a victim into believing that his/her system has malware then it will prompt the victim to pay for its full version which can be found on Lamebabe.com. Antivirus Action should never be purchased and users should not trust anything on Lamebabe.com.
File System Details
Lamebabe.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Temp%\[random]\[random]agnz.exe | |
| 2. | %Temp%\[random]\ |
Registry Details
Lamebabe.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"
"[random]agnz.exe"
