Threat Database Browser Hijackers Mega-scan-pc-new14.biz

Mega-scan-pc-new14.biz

Mega-scan-pc-new14.biz is a misleading website that advertises rogue security applications such as Security Essentials 2010. Mega-scan-pc-new14.biz secretly enters victims' systems with the help of Trojans which hijack web browsers and redirect victims' searches to the malicious domain. A fake system scan, security notifications and pop-up messages will then be displayed in order to trick victims into thinking that their systems are infected. These fake security messages are displayed to coerce victims into purchasing Security Essentials 2010 which will apparently remove the "detected" malware. Use a recognized security tool to remove this browser hijacker and do not waste your money on Security Essentials 2010.

File System Details

Mega-scan-pc-new14.biz may create the following file(s):
# File Name Detections
1. %Temp%\[randomnumbers].exe
2. %Documents and Settings%\[UserName]\Application Data\[randomnumbers].exe
3. %System%\winlogon32.exe
4. %Program Files%\Securityessentials2010\SE2010.exe
5. %System%\smss32.exe
6. %Temp%\[randomnumbers].dll
7. %Documents and Settings%\[UserName]\Start Menu\Security essentials 2010.lnk
8. %Documents and Settings%\[UserName]\Desktop\Security essentials 2010.lnk
9. %Program Files%\Securityessentials2010\

Registry Details

Mega-scan-pc-new14.biz may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Trending

Most Viewed

Loading...