Aliases

* PWCrack-SnadBoy
* PSWTool.Win32.SnadBoy.2011

Category

* Adware or PUA

Type

* Unspecified PUA


Affected operating systems Windows

SnadBoy is a hack tool for the Windows platform.

When SnadBoy is installed it creates the following files and folders:

<PROGRAM FILES>\SnadBoy's Revelation v2\RevelationHelper.dll
<PROGRAM FILES>\SnadBoy's Revelation v2\Revelation.exe
<PROGRAM FILES>\SnadBoy's Revelation v2\INSTALL.LOG

C:\Documents and Settings\All Users\Start Menu\Programs\SnadBoy's Revelation v2\Revelation.lnk

The following registry entries are created under:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SnadBoy's Revelation v2

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
\MenuOrder\Start Menu\Programs\SnadBoy's Revelation v2

HKCU\Software\SnadBoy Software\Revelation

http://www.sophos.com/security/analyses/adware-and-puas/snadboy.html