Mega-scan-pc-new14.biz Description

Mega-scan-pc-new14.biz is a misleading website that advertises rogue security applications such as Security Essentials 2010. Mega-scan-pc-new14.biz secretly enters victims’ systems with the help of Trojans which hijack web browsers and redirect victims’ searches to the malicious domain. A fake system scan, security notifications and pop-up messages will then be displayed in order to trick victims into thinking that their systems are infected. These fake security messages are displayed to coerce victims into purchasing Security Essentials 2010 which will apparently remove the “detected” malware. Use a recognized security tool to remove this browser hijacker and do not waste your money on Security Essentials 2010.

Type: Browser Hijackers

How Can You Detect Mega-scan-pc-new14.biz?

Mega-scan-pc-new14.biz has typically the following processes in memory:

• %Temp%\[randomnumbers].exe
• %Documents and Settings%\[UserName]\Application Data\[randomnumbers].exe
• %System%\winlogon32.exe
• %Program Files%\Securityessentials2010\SE2010.exe
• %System%\smss32.exe
• %Temp%\[randomnumbers].dll

Mega-scan-pc-new14.biz creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Important Article Disclaimer