Virussweeper-scan.net Description

Virussweeper-scan.net is a browser hijacker promoting the rogue anti-spyware application called Malware Catcher 2009 (or, alternatively, as Malware Catcher). Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Virussweeper-scan.net domain. Here the computer is subject to a fake online scan that displays fictitious or grossly exaggerated infection results, all in order to intimidate the user into purchasing the fake spyware remover Malware Catcher.

Type: Rogue Websites

How Can You Detect Virussweeper-scan.net?

Virussweeper-scan.net has typically the following processes in memory:

• %UserProfile%\Recent\energy.sys
• %UserProfile%\Recent\PE.sys
• %UserProfile%\Recent\energy.exe
• %UserProfile%\Recent\fix.sys
• %Documents and Settings%\All Users\Application Data\7c69f0c\MCatcher.exe
• %UserProfile%\Recent\CLSV.dll
• %UserProfile%\Recent\exec.dll
• %UserProfile%\Recent\tjd.exe

Virussweeper-scan.net creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “[xSP_2:2092962508]”
• HKEY_CLASSES_ROOT\MCatcher.DocHostUIHandler
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Malware Catcher 2009″
• HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “6989019803″

Important Article Disclaimer