Home Malware Programs Spyware MalWarrior

MalWarrior

Posted: October 4, 2007

MalWarrior is a fake anti-spyware program that is often downloaded and installed without user knowledge or consent by a Trojan or through browser security holes. MalWarrior launches on Windows startup and may generate large numbers of popup adverts. MalWarrior will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 Install1.exe
    2 MWLauncher.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Adsl Software Limited\MalWarrior 2007HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TacOnlyOne\MalWarriorHKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\TacOnlyOne\MalWarrior

Related Posts

3 Comments

Loading...