Home Malware Programs Adware AdWare.AdSpy

AdWare.AdSpy

Posted: March 11, 2010

AdWare.AdSpy is a malicious Spyware program that monitors and captures information from targeted computer users. AdWare.AdSpy sends the data to hackers for malicious purposes. AdWare.AdSpy may also bombard the victim with adverts related to browser habits. AdWare.AdSpy invades your privacy, steals your personal information and uses it for cybercrime. Use a reliable anti-spyware program to remove Spyware.Ntsvc immediately once it has been detected.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %ProgramFiles%\SpyNoMore\snmIeGuard.dat
    2 %ProgramFiles%\SpyNoMore\snmIeGuard.dll
    3 %ProgramFiles%\SpyNoMore\SNMMain.da1
    4 %ProgramFiles%\SpyNoMore\SNMMain.da2
    5 %ProgramFiles%\SpyNoMore\SNMMain.da3
    6 %ProgramFiles%\SpyNoMore\snmShield.dat
    7 %ProgramFiles%\SpyNoMore\snmVaccinate.dat
    8 %ProgramFiles%\SpyNoMore\SpyNoMore.url
    9 %ProgramFiles%\SpyNoMore\uninst.exe
    10 %System%\windrv.sys

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Illysoft\SNM\Settings][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00020400-0000-0000-C000-000000000046}\OLEViewerIViewerCLSID][HKEY_LOCAL_MACHINE\SOFTWARE\Illysoft]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SpyNoMore]
Loading...