Home Malware Programs Adware SpyBlocs

SpyBlocs

Posted: April 19, 2006

SpyBlocs changes system configuration in any manner without clear notice to the user and user permission at time of change and it updates itself or any other item without clear notice to the user and user permission at time of change.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 alertindext.htm
    2 alertinternetexplorer.htm
    3 alertstartupprogram.htm
    4 eblocssb.dll
    5 eblocssbui.dll
    6 glf7.exe
    7 install.log
    8 notify.wav
    9 reportindex.htm
    10 reportspyware.htm
    11 reporttrackingcookie.htm
    12 restoreiemain.htm
    13 restoreindex.htm
    14 restorerun.htm
    15 restorespyware.htm
    16 restoretrackingcookie.htm
    17 settingsindex.htm
    18 settingsinternetexplorer.htm
    19 settingsstartupprogram.htm
    20 spyblcfg.ini
    21 spyblini.ini
    22 spyblocs.exe
    23 spyblocs6.exe
    24 ssstbar.dll
    25 stbar03.exe
    26 uninstall.exe
    27 unwise.exe
    28 uwhttpsr.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\software\wsliveupHKEY_LOCAL_MACHINE\software\eblocs\spyblocsHKEY_LOCAL_MACHINE\software\wsliveupHKEY..\..\..\..{RegistryKeys}68ff9e0f-2e96-4467-87fa-1a8b9734c7e7\inprocserver32HKEY_CLASSES_ROOT\ssstbar.securitytoolbarHKEY_CLASSES_ROOT\ssstbar.securitytoolbar.1HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}eblocssecuritytoolbareblocssecuritytoolbaruninstallstringspyblocs6.0spyblocsv2.0displaynamespyblocsv2.0uninstallstring
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}1b2bbc27-951c-4c38-a0f0-9587fd586e1e68ff9e0f-2e96-4467-87fa-1a8b9734c7e7
Loading...