Home Malware Programs Trojans Worm.Win32.Netbooster

Worm.Win32.Netbooster

Posted: April 17, 2008

Worm.Win32.Netbooster may appear to be a real worm but now it is being mentioned on fake system error messages as a form of manipulation to make you purchase a rogue anti-spyware program. Worm.Win32.Netbooster's fake system error message may state "Your browser was infected by Worm.Win32.Netbooster" or "Your browser was hijacked by Worm.Win32.Netbooster".

Worm.Win32.Netbooster's fake system error message is meant to confuse you, as well as scare you into believing that you're infected with spyware and finally convice you to purchase the supposed "reliable" anti-spyware application.

Worm.Win32.Netbooster infects your PC using fake trojan codecs that pretend to be free video codecs, often found on pornography websites. If you download free video codecs from questionable wesbites, it is highly probable that you're allowing a Trojan to be installed in your computer. Trojans such as Zlob are notorious for this type of deceptive methods.

Once you click on the Worm.Win32.Netbooster's fake system error message, you will be directed to a href="/removeIEDefender.html" title="Remove IEDefender">IEDefender's home site where you get the commercial version of this rogue anti-spyware application. The immediate removal of Worm.Win32.Netbooster is recommended.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 cjvy.dll
    2 ecxwp.dll
    3 esent9.dll
    4 gqagksr.dll
    5 mlljh.dll
    6 mscfg32.dll
    7 msvideo.dll
    8 pmspl.dll
    9 ssqppol.dll
    10 stream32a.dll
    11 ttvbonvgl.dll
    12 urqnomm.dll
    13 vtssp.dll
    14 websrc32.dll
    15 windivx.dll

Registry Modifications

  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}62EA9201-8CC7-4199-AC30-7744F836322E6A719349-BDF5-4268-9019-4ACA0C2562D26D64B03B-3B93-4AF2-BFC6-01264A4C7F2A43BA0532-0D69-458A-8C71-AD0F6AE70D19A8565FBC-8D53-4D4F-9BB0-CBC68A22B12669B98C68-D2B8-4A4E-9CB7-E85B6F3A7014B3E45A9B-7756-46A2-AB14-90175CD374F9202EBB90-ABD4-46CC-BB5A-4F0ECC67B331F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9BBB05D9E-0297-404D-A6BF-D8F2876B84A6c4545fc9-26d0-4ccf-b4fb-728aed895dbdE856E05E-1B91-4339-9EFC-9A3308CB549115EB9F40-D775-4463-B75B-8687B3C66BB7D17CFF74-A19C-4C36-821A-E074E4F889CAb166be07-30a4-4d38-b781-44528a630706
Loading...