Details or Sample:

Malware Wipe is a medium risk impact program that affects the Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, and Windows XP systems. It has been updated last February 13, 2007 at 11:50:13 AM. It is published by malwarewipe.com and known also as MalwareWipe.exe, mw_install.exe.

It behaves like any other spyware wherein exaggerated warnings of threats on the computer system are given. It will persuade you to purchase the registered version of the software, deceiving you into thinking that it will help remove these risks. Its symptoms include being able to detect one or more files as MalwareWipe.

When MalwareWipe is installed, it creates the following files into the current user’s profile folder, designated as %UserProfile% and into the assigned Program Files folder:
%ProgramFiles%\MalwareWipe\db.dat
%ProgramFiles%\MalwareWipe\Lang\English.ini
%ProgramFiles%\MalwareWipe\MalwareWipe.exe
%ProgramFiles%\MalwareWipe\MalwareWipe.url
%ProgramFiles%\MalwareWipe\msvcp71.dll
%ProgramFiles%\MalwareWipe\msvcr71.dll
%ProgramFiles%\MalwareWipe\uninst.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWipe 4.1.lnk
%UserProfile%\Desktop\MalwareWipe.lnk
%UserProfile%\Local Settings\Temp\MWLanguage.ini
%UserProfile%\Start Menu\Programs\MalwareWipe\MalwareWipe 4.1 Website.lnk
%UserProfile%\Start Menu\Programs\MalwareWipe\MalwareWipe 4.1.lnk
%UserProfile%\Start Menu\Programs\MalwareWipe\Uninstall MalwareWipe 4.1.lnk
%UserProfile%\Start Menu\MalwareWipe 4.1.lnk

MalwareWipe also creates the following registry values and subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0B595E3D-27BE-4DA1-A278-CA4D904B5823}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D1E9B3D-5A4C-4C70-A9B4-5A19E0C625DC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2A34546C-C437-460A-88AF-D4703A548EA9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3D9FD47C-E0B5-4005-9ADE-552980D3761F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3E5B0894-FE91-4063-BB41-D885C7691581}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{479B1AEA-4414-4E43-8CBF-94BFC7C69B56}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4A2ECC12-46BA-4C52-9749-C0FAF38D507B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4D6079CB-FD9E-46AF-A896-6E8582E52827}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{511A9BB1-917A-414A-88FD-3128E37032A1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8CBED98F-8DDD-4AF0-A9EA-C75E10C937BC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A44CAB15-6B7E-406B-9D9B-B1C1C6BA8CDB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A99AC77F-4DE5-4AA2-810A-35FAB5FC114B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B74B2B6C-9B8D-47D9-872F-E83D475AAF34}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CE5ECF63-6065-4B92-8B7E-72B5042C2F25}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4BFBB89-4BC5-4D13-8D3A-75EDCC0CF50C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E86D0281-FA5A-4E36-B993-84FD87DA9DF1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{70F17C8C-1744-41B6-9D07-575DB448DCC5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5C70510-5A01-B2A5-CF84-D6DC13859967}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\MalwareWipe.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{177E74D6-E1D1-4D15-9D36-85399BA00729}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MalwareWipe.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MalwareWipe
HKEY_LOCAL_MACHINE\SOFTWARE\MalwareWipe

It adds the following registry entry "MalwareWipe" = "C:\Program Files\MalwareWipe\MalwareWipe.exe /h" to the registry subkey
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
which allows it to run every time windows start. And it also adds the following registry entries: "{I27D92371C00BA20A}" = "[Random Hex value]" and "{027D92371C00BA20A}" = "[Random Hex value]" to the registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses

Purchase this content for your website...

Pricing:

Make an offer

Usage:

$30

[Add to Cart]

Unique:

$30

[Add to Cart]

Full Rights:

$30

[Add to Cart]

Downloads: 0
Written by: Karina Danielle
Available File Types:Text
Words: 634