Spyware.Known_Bad_Sites
Spyware.Known_Bad_Sites is able to monitor a victim's online activities and capture confidential information. Once inside a system, Spyware.Known_Bad_Sites will make changes to hosts file, redirecting a user's browser to harmful websites each time an attempt is made to access a legitimate website. Spyware.Known_Bad_Sites may redirect its victims to spyware, adware or phishing websites. Spyware.Known_Bad_Sites should be removed with an anti-spyware program to ensure that it is completely removal.
File System Details
Spyware.Known_Bad_Sites may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %System%\kqermpuovi.dll | |
| 2. | %System%\tjhnrruleb.exe |
Registry Details
Spyware.Known_Bad_Sites may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\AvailableVersion]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\tjhnrruleb]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\{3A58855D-8887-2C71-4292-F91334DBC2DB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\DownloadInformation]
