Home Malware Programs Adware TopAV

TopAV

Posted: March 28, 2006

TopAV is an adware spyware. It doesn't show commercial advertisements, but replaces the desktop wallpaper with a fake message saying that viruses have been detected. This message contains a link to topantiviruz.biz site. TopAV doesn't have any additional functions. The adware doesn't spread and must be manually installed. Its files are located in the default computer directory .

File System Modifications

  • The following files were created in the system:
    # File Name
    1 svchosts.dll
    2 svchosts.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerDesktopGeneralWallpaper=%SystemRoot%Webdesktop.html
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}3F245C2A-1558-3CCA-04A8-7AA23B60E40F
Loading...