SpywareRemoval Wizard
|
Description:
|
Adware
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Tuesday, July 10, 2007
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Adware
Software that is displaying pop-up/pop-under windows containing advertisements when the primary user interface is not visible or displayed advertisements are not related to the product.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SCAN & REMOVE NOW »
Geographical Distribution of Threat "SpywareRemoval Wizard"
Threat Info
View All
Detecting items list:
- Files by Name
%PROGRAMFILES%\Spyware Removal Wizard\keygen.dll
%PROGRAMFILES%\Spyware Removal Wizard\liveupdate.exe
%PROGRAMFILES%\Spyware Removal Wizard\Spymonitor.exe
%PROGRAMFILES%\Spyware Removal Wizard\spywareremovalwizard.exe
%PROGRAMFILES%\Spyware Removal Wizard\unins000.exe
%START_PROGRAMSALL%\Spyware Removal Wizard\Liveupdate.lnk
%START_PROGRAMSALL%\Spyware Removal Wizard\Spymonitor.lnk
%START_PROGRAMSALL%\Spyware Removal Wizard\Spywware Removal Wizard.lnk
%START_PROGRAMSALL%\Spyware Removal Wizard\Uninstall Spyware Removal Wizard.lnk
%DESKTOP%\Spywware Removal Wizard.lnk
%SYSDIR%\Pak.dll
%SYSDIR%\Spywizard.dll
- Files by Directories
%PROGRAMFILES%\Spyware Removal Wizard %START_PROGRAMSALL%\Spyware Removal Wizard
- Files by CLSID or Name
CLSID=7FE819E0-977E-4EBB-AD34-B3146D75237F
CLSID=DDCCCD42-984E-47A8-8B08-F82A07D2F84A
CLSID=F9920AFD-BC3C-460D-9BD7-2B8D1FFB8D19
- Registry Keys
HKCR\AppID\Spywizard.DLL
HKCR\Pak.clsPak
HKCR\Spywizard.Scan
HKCR\Spywizard.Scan.1
HKLM\SOFTWARE\Antispyware\Spywizard
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spyware Removal Wizard_is1
- Registry Values
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=Spymonitor
«
Go to Software Database
