Threat Database Rogue Websites Websiteblockonline.com

Websiteblockonline.com

Websiteblockonline.com is a criminal website that advertises and distributes Antivirus 7. Once your browser settings have been infected with Websiteblockonline.com, you will be frequently redirected to it and your access to other websites may be blocked. Should you find yourself being redirected to Websiteblockonline.com, get a legitimate anti-spyware application to remove it and all the malware associated with it.

File System Details

Websiteblockonline.com may create the following file(s):
# File Name Detections
1. %WINDOWS%\system32\UpdateCheck.dll
2. %ProgramFiles%\Antivirus7AV\unins000.exe
3. %Program Files%\AV\Antivirus7.exe
4. %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk
5. %ProgramFiles%\CommonFiles\Uninstall
6. %Program Files%\Antivirus7AV
7. %Documents and Settings%\All Users\Start Menu\AV\Antivirus7.lnk
8. %Program Files%\AV
9. %ProgramFiles%\CommonFiles\Uninstall\AV\Uninstall.lnk
10. %Documents and Settings%\All Users\Start Menu\AV
11. %Documents and Settings%\[UserName]\Desktop\Antivirus7.lnk
12. %ProgramFiles%\CommonFiles\Uninstall\AV
13. %ProgramFiles%\Antivirus7AV\Antivirus7.exe %ProgramFiles%\Antivirus7AV\unins000.dat

Registry Details

Websiteblockonline.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\FNULL246
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009"
HKEY_CURRENT_USER\Software\EVAACD
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus7"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1

Trending

Most Viewed

Loading...