Websiteblockonline.com

Websiteblockonline.com Description

Websiteblockonline.com is a criminal website that advertises and distributes Antivirus 7. Once your browser settings have been infected with Websiteblockonline.com, you will be frequently redirected to it and your access to other websites may be blocked. Should you find yourself being redirected to Websiteblockonline.com, get a legitimate anti-spyware application to remove it and all the malware associated with it.

Technical Information

File System Details

Websiteblockonline.com creates the following file(s):
# File Name Detection Count
1 %WINDOWS%\system32\UpdateCheck.dll N/A
2 %ProgramFiles%\Antivirus7AV\unins000.exe N/A
3 %Program Files%\AV\Antivirus7.exe N/A
4 %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk N/A
5 %ProgramFiles%\CommonFiles\Uninstall N/A
6 %Program Files%\Antivirus7AV N/A
7 %Documents and Settings%\All Users\Start Menu\AV\Antivirus7.lnk N/A
8 %Program Files%\AV N/A
9 %ProgramFiles%\CommonFiles\Uninstall\AV\Uninstall.lnk N/A
10 %Documents and Settings%\All Users\Start Menu\AV N/A
11 %Documents and Settings%\[UserName]\Desktop\Antivirus7.lnk N/A
12 %ProgramFiles%\CommonFiles\Uninstall\AV N/A
13 %ProgramFiles%\Antivirus7AV\Antivirus7.exe %ProgramFiles%\Antivirus7AV\unins000.dat N/A

Registry Details

Websiteblockonline.com creates the following registry entry or registry entries:
RegistryKey
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\FNULL246
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009"
HKEY_CURRENT_USER\Software\EVAACD
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus7"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1