Www1.savewayforurown-pc.in

By Domesticus in Rogue Websites

Translate To:

Www1.savewayforurown-pc.in is a malicious domain disguised as a legitimate online system scanner. Trojans are used to poison users' browsers causing them to be redirected to Www1.savewayforurown-pc.in. Www1.savewayforurown-pc.in conducts a fake online system scan which automatically claims that the system is infected with several dangerous malware. Fake pop-up alerts may also be displayed in an attempt to trick the user into thinking that his/her system is in danger and the only solution is to purchase the "full" version of CleanUp Antivirus. Never purchase any software recommended by Www1.savewayforurown-pc.in and use a reliable security tool to scan your system and remove the rogue domain as well as any associated malware.

File System Details

Www1.savewayforurown-pc.in may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
Name: %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll Type: Dynamic link library
2.	%Documents and Settings%\[UserName]\Recent\FS.dll
Name: %Documents and Settings%\[UserName]\Recent\FS.dll Type: Dynamic link library
3.	%Documents and Settings%\[UserName]\Recent\tjd.sys
Name: %Documents and Settings%\[UserName]\Recent\tjd.sys Type: System file
4.	%Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
Name: %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll Type: Dynamic link library
5.	%Documents and Settings%\[UserName]\Recent\DBOLE.sys
Name: %Documents and Settings%\[UserName]\Recent\DBOLE.sys Type: System file
6.	%Documents and Settings%\[UserName]\Recent\PE.exe
Name: %Documents and Settings%\[UserName]\Recent\PE.exe Type: Executable File
7.	%Documents and Settings%\All Users\Application Data\345d567\CU345d.exe
Name: %Documents and Settings%\All Users\Application Data\345d567\CU345d.exe Type: Executable File
8.	%Documents and Settings%\[UserName]\Recent\DBOLE.dll
Name: %Documents and Settings%\[UserName]\Recent\DBOLE.dll Type: Dynamic link library
9.	%Documents and Settings%\[UserName]\Recent\grid.exe
Name: %Documents and Settings%\[UserName]\Recent\grid.exe Type: Executable File
10.	%Documents and Settings%\All Users\Application Data\345d567\CUA.ico
Name: %Documents and Settings%\All Users\Application Data\345d567\CUA.ico
11.	%Documents and Settings%\All Users\Application Data\345d567\CUASys\vd952342.bd
Name: %Documents and Settings%\All Users\Application Data\345d567\CUASys\vd952342.bd
12.	%Documents and Settings%\All Users\Application Data\CUCAISTUA\CUEWA.cfg
Name: %Documents and Settings%\All Users\Application Data\CUCAISTUA\CUEWA.cfg
13.	%Documents and Settings%\[UserName]\Application Data\CleanUp Antivirus\cookies.sqlite
Name: %Documents and Settings%\[UserName]\Application Data\CleanUp Antivirus\cookies.sqlite
14.	%Documents and Settings%\[UserName]\Desktop\CleanUp Antivirus.lnk
Name: %Documents and Settings%\[UserName]\Desktop\CleanUp Antivirus.lnk Type: Shortcut
15.	%Documents and Settings%\[UserName]\Recent\eb.tmp
Name: %Documents and Settings%\[UserName]\Recent\eb.tmp Type: Temporary File
16.	%Documents and Settings%\[UserName]\Recent\pal.tmp
Name: %Documents and Settings%\[UserName]\Recent\pal.tmp Type: Temporary File
17.	%Documents and Settings%\[UserName]\Recent\tjd.tmp
Name: %Documents and Settings%\[UserName]\Recent\tjd.tmp Type: Temporary File
18.	%Documents and Settings%\All Users\Application Data\345d567\46.mof
Name: %Documents and Settings%\All Users\Application Data\345d567\46.mof
19.	%Documents and Settings%\All Users\Application Data\345d567\CUASys
Name: %Documents and Settings%\All Users\Application Data\345d567\CUASys
20.	%Documents and Settings%\All Users\Application Data\CUCAISTUA
Name: %Documents and Settings%\All Users\Application Data\CUCAISTUA
21.	%Documents and Settings%\[UserName]\Application Data\CleanUp Antivirus
Name: %Documents and Settings%\[UserName]\Application Data\CleanUp Antivirus
22.	%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\CleanUp Antivirus.lnk
Name: %Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\CleanUp Antivirus.lnk Type: Shortcut
23.	%Documents and Settings%\[UserName]\Recent\CLSV.tmp
Name: %Documents and Settings%\[UserName]\Recent\CLSV.tmp Type: Temporary File
24.	%Documents and Settings%\[UserName]\Recent\pal.drv
Name: %Documents and Settings%\[UserName]\Recent\pal.drv Type: Device Driver
25.	%Documents and Settings%\[UserName]\Recent\tempdoc.tmp
Name: %Documents and Settings%\[UserName]\Recent\tempdoc.tmp Type: Temporary File
26.	%Documents and Settings%\All Users\Application Data\345d567
Name: %Documents and Settings%\All Users\Application Data\345d567
27.	%Documents and Settings%\All Users\Application Data\345d567\BackUp
Name: %Documents and Settings%\All Users\Application Data\345d567\BackUp
28.	%Documents and Settings%\All Users\Application Data\345d567\Quarantine Items
Name: %Documents and Settings%\All Users\Application Data\345d567\Quarantine Items
29.	%Program Files%\Mozilla Firefox\searchplugins\search.xml
Name: %Program Files%\Mozilla Firefox\searchplugins\search.xml
30.	%Documents and Settings%\[UserName]\Application Data\CleanUp Antivirus\Instructions.ini
Name: %Documents and Settings%\[UserName]\Application Data\CleanUp Antivirus\Instructions.ini
31.	%Documents and Settings%\[UserName]\Recent\cb.tmp
Name: %Documents and Settings%\[UserName]\Recent\cb.tmp Type: Temporary File
32.	%Documents and Settings%\[UserName]\Recent\exec.tmp
Name: %Documents and Settings%\[UserName]\Recent\exec.tmp Type: Temporary File
33.	%Documents and Settings%\[UserName]\Recent\tempdoc.drv
Name: %Documents and Settings%\[UserName]\Recent\tempdoc.drv Type: Device Driver
34.	%Documents and Settings%\[UserName]\Start Menu\CleanUp Antivirus.lnk
Name: %Documents and Settings%\[UserName]\Start Menu\CleanUp Antivirus.lnk Type: Shortcut

Registry Details

Www1.savewayforurown-pc.in may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "Library1.00195"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List "%Documents and Settings%\All Users\Application Data\345d567\CU345d.exe"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"

HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=195&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "CleanUp Antivirus"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List "%Documents and Settings%\All Users\Application Data\345d567\CU345d.exe"

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Www1.savewayforurown-pc.in

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen