Netspywarescan.com

Netspywarescan.com Description

Netspywarescan.com is a website created by criminals to distribute rogue security software. The rogueware promoted by Netspywarescan.com is called AntiSpyware Pro 2009 and once it is inside a machine it will generate fake security alerts to prompt a user into purchasing it. Sneaky Trojans associated with this malicious domain will modify the browser settings which will result in frequent redirection to Netspywarescan.com when attempting to browse the internet or when a user clicks on the fake security alerts generated by the rogueware. Netspywarescan.com will display a fake online scanner which is set to automatically detect several dangerous malware. Of course the scan is fake and so are its results; users should avoid visiting Netspywarescan.com and never purchase or click on anything on this website.

Technical Information

File System Details

Netspywarescan.com creates the following file(s):
# File Name Detection Count
1 gisyflngpshcvuakv.dll N/A
2 main.exe N/A
3 %Documents and Settings%\All Users\Application Data\Solt Lake Software\Pro Antispyware 2009\aspro2009.exe N/A

Registry Details

Netspywarescan.com creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Solt Lake Software
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uzymaulreqvtfzbe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDA08241-09F3-2DBE-22B1-5B44B581231C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDA08241-09F3-2DBE-22B1-5B44B581231C}
HKEY_CURRENT_USER\Software\{EBFF3366-F653-ACA1-0798-E062A58FA824}
HKEY_CLASSES_ROOT\CLSID\{FDA08241-09F3-2DBE-22B1-5B44B581231C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mfhsornwnduy"