Threat Database Browser Hijackers Spywarewebsiteblock.com

Spywarewebsiteblock.com

Spywarewebsiteblock.com is a malicious website that can hijack a web browser application and change settings without permission from the computer user. Spywarewebsiteblock.com, once visited, will display fake warning message and then lead to a page that promotes and sells the Alpha Antivirus rogue anti-spyware program.

File System Details

Spywarewebsiteblock.com may create the following file(s):
# File Name Detections
1. %WINDOWS%\system32\NetFilter.exe
2. %WINDOWS%\system32\msnaoladdon.dll
3. %WINDOWS%\system32\drivers\NDISRD.sys
4. %Program Files%\AlphaAV\AlphaAV.exe
5. %WINDOWS%\system32\ndisapi.dll
6. %UserProfile%\Desktop\Alpha Antivirus.lnk
7. %Program Files%\AlphaAV

Registry Details

Spywarewebsiteblock.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Alpha Antivirus"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "AlphaAV"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Alpha Antivirus
HKEY_LOCAL_MACHINE\Software\Alpha Antivirus
HKEY_CURRENT_USER\Software\Alpha Antivirus

Trending

Most Viewed

Loading...