Threat Database Fake Error Messages 'Video ActiveX Object Error' Fake Message

'Video ActiveX Object Error' Fake Message

'Video ActiveX Object Error' is a fake error message displayed when users visit infected movie websites. The 'Video ActiveX Object Error' message prompts a victim to download and install the 'new version of Video ActiveX Object' in order to watch a video. This is a scam; the provided download is not for legitimate software but malicious malware such as Trojans.

File System Details

'Video ActiveX Object Error' Fake Message may create the following file(s):
# File Name Detections
1. dumpserv.com
2. zxserv0.com
3. msvol.tlb
4. hp[X].tmp
5. ncompat.tlb
6. vnp7s.net

Registry Details

'Video ActiveX Object Error' Fake Message may create the following registry entry or registry entries:
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\some
{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
{ab75cc7d-2751-4144-a278-5462d5a5884c}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Online Add-on
NetProject
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
{2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}
F10587E9-0E47-4CBE-84AE-7DD20B8684CC
7265100a-17e1-41bf-bd08-63b95a25a9c3
{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
{C03FD59D-9104-44B7-929A-9EAA0BA05211}
{F7D09218-46D7-4D3D-9B7F-315204CD0836}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
%UserProfile%\Application Data\Microsoft\Crypto\RSA
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
{F2BADA0D-FD61-45EF-A994-64A073FD6613}
{aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
E404.e404mgr.1
Microsoft\Windows\CurrentVersion\Uninstall\Web Application
Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
BA0BACB5-FC95-451E-94D2-4959AB0949D2
{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
{E63648F7-3933-440E-B4F6-A8584DD7B7EB}
Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
{a6d478c6-7961-4fe9-be4b-e621dd640112}
10C52A42-DB8B-4ade-AA4A-CED6A8282B85
HKEY_CURRENT_USER\Software\Online Add-on
c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
{c0ca766d-060c-48e1-b536-205e321bd174}
Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Windows\CurrentVersion\policies\explorer\run\some
{747e1fbe-b70f-441d-bbca-6e536c04924a}
{27cb634d-c84e-4c00-9b53-f5523601dbad}
E404.e404mgr
{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
{499B8A53-5949-4625-A8BF-A4D934AFC9DA}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
%UserProfile%\Application Data\Microsoft\ProtectObjects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}

2 Comments

Walking in the presence of giants here. Cool thinking all around!

Cool! That's a clever way of looking at it!

Trending

Most Viewed

Loading...