Spamweblist.com
Spamweblist.com is a dangerous web site that was created by the hackers that market and sell the rogue anti-spyware application called Antivirus 7. Antivirus 7 is an illicit computer program that does not have the ability to remove parasites as it may claim to. Spamweblist.com is another avenue for hackers to spread rogue applications. Spamweblist.com should never be visited under any circumstances as it could trick unsuspecting computer users into downloading, installing and potentially purchasing a malicious application.
File System Details
Spamweblist.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Program Files%\Antivirus7AV\unins000.exe | |
| 2. | %Program Files%\Antivirus7AV\Antivirus7.exe | |
| 3. | %Program Files%\AV\Antivirus7.exe | |
| 4. | %WINDOWS%\system32\UpdateCheck.dll | |
| 5. | %Documents and Settings%\[UserName]\Desktop\Antivirus7.lnk | |
| 6. | %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk | |
| 7. | %Program Files%\Antivirus7AV\unins000.dat | |
| 8. | %Documents and Settings%\All Users\Start Menu\AV\Antivirus7.lnk | |
| 9. | %Program Files%\Common Files\Uninstall\AV\Uninstall.lnk |
Registry Details
Spamweblist.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\FNULL246
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009"
HKEY_CURRENT_USER\Software\EVAACD
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus7"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1
