Home Malware Programs Adware Replace

Replace

Posted: March 28, 2006

Replace is an adware spyware that shows excessively large amount of unsolicited pop-up advertisements. The threat silently downloads from the Internet and executes arbitrary potentially harmful files. It also is able to update itself. Replace runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 1.01.00.dll
    2 services.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunxpsystem

Related Posts

Loading...