Welcome to remove-malware.net

How to remove Customwebblacklist.com hijacker

Malware Description:
Customwebblacklist.com is being mentioned on many discussion boards dedicated to IT security issues. The website we mentioned is not a regular one due to its fraudulent and very obnoxious essence. Another thing about Customwebblacklist.com that makes it a threat is the relation to Antivirus 7 – a fake malware removal program that spreads through trojans. So the very first thing you need to acknowledge in case you are suffering from forcible browser redirects to Customwebblacklist.com is you got a nasty infection on your computer which is trying to scam you out of some dough. Antivirus 7 appeared in early March and had been active for literally a few weeks followed by a long pause in rotation. Apparently, the hackers haven’t given up the idea of distributing their malicious cyber offspring, so now we are witnessing a new swing in Antivirus 7 propagation. If this rogue anti-spyware manages to compromise your system, it will quickly change some settings including the browsing configuration. Your Internet activity will be therefore much affected because of the obsessive interference consisting in browser diverts to Customwebblacklist.com/block.php URL. It looks exactly like the message captured on image 1 below. It appears to be a bogus web warning that reads “Attention! Your web page request has been cancelled” (by the way, we analyzed this one in our previous entry). The spoof alert page advises you push the button saying ‘Fix Now’ which eventually leads to one of the two possible a payment processing sub domains (please review the two other screenshots below). So you must have figured out that Customwebblacklist.com is aiming to make you purchase one of the most aggressive rogue security programs presently – it’s Antivirus 7. It’s our duty to inform you that the only way to prevent Customwebblacklist.com hijacker from messing with your web-surfing is Antivirus 7 removal. In other words, if you are experiencing random visits to Customwebblacklist.com, this denotes the presence of Antivirus 7 scareware on your computer. Below this article, you can find the guide to remove the interconnected malware items under consideration.

Malware Type: Browser Hijackers

Malware Author: Innovagest2000 SL

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Customwebblacklist.com Hijacker Free Scanner and Remover: Download Now

Customwebblacklist.com Bogus Warning Screenshot:

Customwebblacklist.com Payment Processing Page Screenshot 1:

Customwebblacklist.com Payment Processing Page Screenshot 2:

How to remove Customwebblacklist.com hijacker and affiliated threats manually:
Manual removal of Customwebblacklist.com hijacker is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Documents and Settings%\All Users\Start Menu\AV
• %Documents and Settings%\All Users\Start Menu\AV\Antivirus7.lnk
• %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk
• %Documents and Settings%\[UserName]\Desktop\Antivirus7.lnk
• %Program Files%\AV
• %Program Files%\AV\Antivirus7.exe
• %Program Files%\Common Files\Uninstall
• %Program Files%\Common Files\Uninstall\AV
• %Program Files%\Common Files\Uninstall\AV\Uninstall.lnk
• %Program Files%\Antivirus7AV
• %Program Files%\Antivirus7AV\Antivirus7.exe
• %Program Files%\Antivirus7AV\unins000.dat
• %Program Files%\Antivirus7AV\unins000.exe
• %WINDOWS%\system32\UpdateCheck.dll

The registry entries that need to be removed are as follows:

• HKEY_CURRENT_USER\Software\EVAACD
• HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus7″
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform “WinNT-EVI 25.11.2009″
• HKEY_CURRENT_USER\Software\FNULL246
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1

Please, be aware that manual removal of Customwebblacklist.com hijacker is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Customwebblacklist.com hijacker, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

There are currently no similar articles.