Powerantivirusscannerv2.com Description

Powerantivirusscannerv2.com is a browser hijacker promoting the rogue anti-spyware application called Personal Antivirus. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Powerantivirusscannerv2.com domain. Here the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results in order to persuade the user to purchase the fake spyware remover known as Personal Antivirus.

Type: Rogue Websites

Automatic Detection of Powerantivirusscannerv2.com

Powerantivirusscannerv2.com has typically the following processes in memory:

• %Program Files%\Personal Antivirus\PerAvir.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe

Powerantivirusscannerv2.com creates the following registry entries:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”

Important Article Disclaimer