Threat Database Rogue Websites Netspywarescan.com

Netspywarescan.com

By ZulaZuza in Rogue Websites

Netspywarescan.com is a website created by criminals to distribute rogue security software. The rogueware promoted by Netspywarescan.com is called AntiSpyware Pro 2009 and once it is inside a machine it will generate fake security alerts to prompt a user into purchasing it. Sneaky Trojans associated with this malicious domain will modify the browser settings which will result in frequent redirection to Netspywarescan.com when attempting to browse the internet or when a user clicks on the fake security alerts generated by the rogueware. Netspywarescan.com will display a fake online scanner which is set to automatically detect several dangerous malware. Of course the scan is fake and so are its results; users should avoid visiting Netspywarescan.com and never purchase or click on anything on this website.

File System Details

Netspywarescan.com may create the following file(s):
# File Name Detections
1. gisyflngpshcvuakv.dll
2. main.exe
3. %Documents and Settings%\All Users\Application Data\Solt Lake Software\Pro Antispyware 2009\aspro2009.exe

Registry Details

Netspywarescan.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Solt Lake Software
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uzymaulreqvtfzbe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDA08241-09F3-2DBE-22B1-5B44B581231C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDA08241-09F3-2DBE-22B1-5B44B581231C}
HKEY_CURRENT_USER\Software\{EBFF3366-F653-ACA1-0798-E062A58FA824}
HKEY_CLASSES_ROOT\CLSID\{FDA08241-09F3-2DBE-22B1-5B44B581231C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mfhsornwnduy"

Trending

Most Viewed

Loading...