Spamweblist.com

Spamweblist.com Description

Spamweblist.com is a dangerous web site that was created by the hackers that market and sell the rogue anti-spyware application called Antivirus 7. Antivirus 7 is an illicit computer program that does not have the ability to remove parasites as it may claim to. Spamweblist.com is another avenue for hackers to spread rogue applications. Spamweblist.com should never be visited under any circumstances as it could trick unsuspecting computer users into downloading, installing and potentially purchasing a malicious application.

Technical Information

File System Details

Spamweblist.com creates the following file(s):
# File Name Detection Count
1 %Program Files%\Antivirus7AV\unins000.exe N/A
2 %Program Files%\Antivirus7AV\Antivirus7.exe N/A
3 %Program Files%\AV\Antivirus7.exe N/A
4 %WINDOWS%\system32\UpdateCheck.dll N/A
5 %Documents and Settings%\[UserName]\Desktop\Antivirus7.lnk N/A
6 %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk N/A
7 %Program Files%\Antivirus7AV\unins000.dat N/A
8 %Documents and Settings%\All Users\Start Menu\AV\Antivirus7.lnk N/A
9 %Program Files%\Common Files\Uninstall\AV\Uninstall.lnk N/A

Registry Details

Spamweblist.com creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\FNULL246
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009"
HKEY_CURRENT_USER\Software\EVAACD
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus7"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1