Home Malware Programs Browser Hijackers Awebsecurity.com

Awebsecurity.com

Posted: August 6, 2007

Awebsecurity.com is a computer hijacker that results from a Zlob Trojan infection. Once installed, Zlob.Trojan will produce fake security messages stating that your computer is in serious danger and with the help of awebsecurity.com hijacker, it will redirect your homepage to awebsecurity.com which promotes rogue anti-spyware software products. It is highly recommended to remove awebsecurity.com because it may transfer information from the infected computer to unknown servers which makes it potential for data theft.

Aliases

Hijacker.awebsecurity.com

File System Modifications

  • The following files were created in the system:
    # File Name
    1 Awebsecurity.com
    2 cfqbw.dll
    3 cqsfk.dll
    4 dxovx.dll
    5 fdpzgi.dll
    6 iesplugin.dll
    7 iesuninst.exe
    8 isaddon.dll
    9 isamini.exe
    10 isamonitor.exe
    11 pmmon.exe
    12 pmsngr.exe
    13 pmuninst.exe
    14 psndz.dll
    15 vgibz.dll
    16 wzhtjqo.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49CF52D7-8D58-4E22-A874-AAD721F5B523}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\browsers.ToolBar.1HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSDNS.MSDNSAppHKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSVPS.MSVPSAppHKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\browsers.StockBarHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VideoExtensionHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{49CF52D7-8D58-4E22-A874-AAD721F5B523}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5574E139-F59C-4bee-9A61-150B0D3A16C7}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper objects\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}IExplorer Security Plug-inInternet Explorer Secure BarMessenger Service
Loading...