Scanner.just-protect-pc.info Description

Scanner.just-protect-pc.info is a harmful domain that runs fake system scans in order to trick users into thinking that their systems are infected. Scanner.just-protect-pc.info is inserted into victims’ Hosts files by Trojans that are designed to surreptitiously enter computer systems. Once visited, Scanner.just-protect-pc.info will launch a fake online system scan that automatically reports that the user’s system is infested with dangerous malware. The fake system security reports, alerts and notifications are displayed in order to scare victims into purchasing the “full” version of Antivirus – a fake security program. Should you encounter Scanner.just-protect-pc.info it is advisable to use a legitimate malware removal tool to exterminate this browser hijacker from your system.

Type: Browser Hijackers

How Can You Detect Scanner.just-protect-pc.info?

Scanner.just-protect-pc.info has typically the following processes in memory:

• %Program Files%\Antivirus\AvBho.dll
• %Program Files%\Antivirus\Antivirus.exe
• %Program Files%\Antivirus\wscsvc32.exe
• %Temp%\winupd64x.exe
• %Program Files%\Antivirus\Uninstall.exe

Scanner.just-protect-pc.info creates the following registry entries:

• HKEY_CLASSES_ROOT\CLSID\{9d541c6a-573b-4888-b35e-6816e68c3620}
• HKEY_CLASSES_ROOT\TypeLib\{65DA0CE6-30D1-4144-A0B6-59BD01372E26}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus
• HKEY_CLASSES_ROOT\AvBho.AvBhoApp.1
• HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9d541c6a-573b-4888-b35e-6816e68c3620}
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “wscsvc32.exe”
• HKEY_CLASSES_ROOT\AvBho.AvBhoApp
• HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
• HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus.exe”

Important Article Disclaimer