SpywareGuide powered by Actiance Security Labs
Search SpywareGuide Database & Site
Home Access the Guide
List of Products List of Companies List of Categories
Tools
X-RayPC
Terms and Definitions
 
Full Name:
SpywareNo! Websearch   Read More
Type: Miscellaneous Security
Also Known as: Spyware No!
Created by: SS Development
SG Index: 5 [Explain]
Removal tools: List of products that detect/remove/protect against SpywareNo!:
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: These are usually anti-spyware or security software applications that use various forms of deception and/or unethical means or show a history of negligent false positives to goad the end user to make a purchase.

    In some cases these applications maybe downloaded with some form of unwanted software at which point the rogue application is offered to the customer as a way to remove the unwanted software.
    Official Description: Rogue Anti-adware application
    Changes windows policy settings.
    Displays a warning from the system tray that your computer is infected with spyware. Will not let you remove the spyware unless you buy the full version.
    Changes the desktop wallpaper with a warning message."Your System Is Infected"
    pqnelhleyy 9d3727f0 5399fade


    Comment: Found bundled with 7 other adware products including a dialer from another website. The infection comes in the guise of winlogin.exe from this site: vxiframe.biz/adverts/progs/winlogon.exe. If you Google the file name it will yield a perfectly legitimate file from Windows. However, the contents of the file refer to this location C:\Program Files\SpywareNo\SpywareNo.exe.
    Screenshots:
    SpywareNo! Fake warning in the system tray
    SpywareNo! Main Screen of SpywareNo!
    SpywareNo! Warning message issued by Spywareno!
    SpywareNo! Fake message generated from SpywareNO!
    Information URL: http://www.spywareno.com
       
    Manual removal: After removing with X-cleaner or Regblock, you will have to edit some registry settings.

    1.Click on the start button
    2.Click on run
    3.Type in regedit and click ok
    4.When regedit opens, browse to each one of the following keys and in the right pane change the data to 0.Right click on the "Name" choose "modify" and change the Value Data to 0

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoAddingComponents"


    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallpaper"


    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoComponents"


    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoDeletingComponents"


    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoEditingComponents"


    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoHTMLWallPaper"


    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "ClassicShell"

    5.After changing the policy settings, browse to the Windows directory and delete the file "desktop.html"
    6. Rebott computer

    Click here to leave feedback for this product

    Recent Modifications
    2013-7-20  Date Manager
    2013-4-10  BeeBus
    2012-12-18  JT.Moonwalk
    2012-12-18  Sadbiz
    2012-12-18  Troj.GoogleBot
    2012-12-18  W32.Licat Worm
    2012-11-16  CoolWebSearch
    2012-6-21  AntiSpywareXP
    2012-6-21  Bget
    2012-6-21  Dloader.cao.1
     
    Company  | Site and Spyware FAQ
    © Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy