Lamebabe.com

Lamebabe.com is a rogue website used to promote the fake security program Antivirus Action. Lamebabe.com displays pop-up alerts claiming that the system is infected. The alerts will also prompt a user to purchase the “licensed” version of Antivirus Action in order to remove the purportedly detected malware. Do not purchase anything promoted on Lamebabe.com and have Antivirus Action removed from your system upon detection.

Lamebabe.com Automatic Detection Tool (Recommended)

Is your PC infected with Lamebabe.com? To safely & quickly detect Lamebabe.com, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Lamebabe.com What happens if Lamebabe.com does not let you open SpyHunter or blocks the Internet?

File System Modifications

The following files were created in the system:

# File Name

1 %Temp%\[random]\

2 %Temp%\[random]\[random]agnz.exe

#	File Name
1	%Temp%\[random]\
2	%Temp%\[random]\[random]agnz.exe

Registry Modifications

The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:33921″HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]agnz.exe”HKEY_CURRENT_USER\Software\[random]HKEY..\..\..\..{RegistryKeys}“[random]agnz.exe”HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run