RazeSpyware
|
Description:
|
Rogue Security Program
|
|
Risk Level:
|
High
|
|
Date of First Occurence:
|
Tuesday, June 24, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Rogue/Suspect Anti-Spyware Product
"Rogue/Suspect" means that these products are of unknown, questionable, or dubious value as anti-spyware protection.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
REMOVER SPYWARE »
Geographical Distribution of Threat "RazeSpyware"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\RazeSpyware\Update.exe
MD5: 2FAE7C7E83672F12F0121613C65D37B8 Size:45056
%PROGRAMFILES%\RazeSpyware\App.exe
MD5: 607AED70C22CEBABA593EDEC61CCD7F3 Size:1708072
%PROGRAMFILES%\RazeSpyware\Uninstall.exe
MD5: 767F2FC5452484F7779BCED5575077D5 Size:188416
%PROGRAMFILES%\RazeSpyware\drv\xpdriver.sys
MD5: 6835357A1D6EB8AC0874169D381DE4B8 Size:144512
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%ProgramFiles%\RazeSpyware\RazeSpyware.dll
%ProgramFiles%\RazeSpyware\RazeSpyware_monitor.dll
%ProgramFiles%\RazeSpyware\RazeSpyware_monitor.exe
%ProgramFiles%\RazeSpyware\RazeSpyware.exe
%ProgramFiles%\RazeSpyware\database.dat
%ProgramFiles%\RazeSpyware\scan.log
%ProgramFiles%\RazeSpyware\Uninstall.exe
%ProgramFiles%\RazeSpyware\UnzDll.dll
%ProgramFiles%\RazeSpyware\Scripts\AutoExec.sss
%ProgramFiles%\RazeSpyware\Scripts\SPyiBlock.sss
%ProgramFiles%\SpyCut\SpyCut.dll
%ProgramFiles%\SpyCut\SpyCut_monitor.dll
%ProgramFiles%\SpyCut\spycut_monitor.exe
%ProgramFiles%\SpyCut\SpyCut.exe
%ProgramFiles%\SpyCut\database.dat
%ProgramFiles%\SpyCut\scan.log
%ProgramFiles%\SpyCut\Uninstall.exe
%ProgramFiles%\SpyCut\UnzDll.dll
%ProgramFiles%\SpyCut\Scripts\AutoExec.sss
%ProgramFiles%\SpyCut\Scripts\SpyCut.sss
%DESKTOP%\SpyCut.lnk
%DESKTOP%\RazeSpyware.lnk
%START_PROGRAMS%\RazeSpyware\RazeSpyware.lnk
%START_PROGRAMS%\SpyCut\SpyCut.lnk
%START_PROGRAMS%\SpyCut\SpyCut Monitor.lnk
%START_PROGRAMS%\SpyCut\Uninstall.lnk
- Files by Directories
%ProgramFiles%\RazeSpyware
%START_PROGRAMS%\RazeSpyware
%ProgramFiles%\SpyCut
%START_PROGRAMS%\SpyCut
- Registry Keys
HKCU\Software\RazeSpyware
HKCU\Software\SpyCut
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RazeSpyware
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyCut
- Registry Values
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=RazeSpyware
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=RazeSpyware Monitor
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=SpyCut
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=SpyCut Monitor
HKCU\Software\Borland\Locales ValueName=%programfiles%\RazeSpyware\RazeSpyware.exe
HKCU\Software\Borland\Locales ValueName=%programfiles%\RazeSpyware\RazeSpyware_Monitor.exe
HKCU\Software\Borland\Locales ValueName=%programfiles%\SpyCut\SpyCut.exe
HKCU\Software\Borland\Locales ValueName=%programfiles%\SpyCut\spycut_monitor.exe
«
Go to Software Database
