Home Malware Programs Browser Hijackers Asafetywarning.com

Asafetywarning.com

Posted: August 7, 2007

Asafetywarning.com is a dangerous computer hijacker which is a variant of Trojan.Zlob. It hijacks your homepage and redirects your Internet Explorer to "http://asafetywarning.com". Once installed onto your computer, Zlob.Trojan will bombard you with hundreds popup Warning messages claiming that your computer is infected. Warning messages may look like the following: "Critical System Error", "Your computer is infected", "System Alert", "Trojan-Spy.win32@mx", "Internet connection speed decreased by 39%" and so on. This is the way how Asafetywarning.com attempts to trick you into buying other rogue anti-spyware application. Moreover, Asafetywarning.com may transfer back and forth information from infected computer to a third party which is a serious risk to the security of your sensitive information such as personal and financial data.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 Asafetywarning.com
    2 eowygj.dll
    3 pkgvyg.dll
    4 pmmon.exe
    5 pmsngr.exe
    6 qzviz.dll
    7 vb.ini
    8 Ygjun.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CLASSES_ROOTTypeLib{728E63B0-5165-4E98-9C83-EF987EEB66C9} [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b0ded443-5e68-4001-a81b-0a0001621ab8}]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9d6fac42-a7be-4702-87ef-75d8dc14249e}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler{9d6fac42-a7be-4702-87ef-75d8dc14249e}HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{728E63B0-5165-4E98-9C83-EF987EEB66C9}
Loading...