Vrusstatuscheck.com Description

Vrusstatuscheck.com is a browser hijacker promoting the rogue anti-spyware application called Personal Antivirus. Typically you are diverted to this malicious website due to trojan viruses infiltrating your system via security exploits and modifying your browser settings. Once you finally hit Vrusstatuscheck.com, you are subject to a fake online scan that reports fabricated infection results. This is all in order to intimidate you into purchasing Personal Antivirus, under the assumption it will actually help protect your system.

Type: Rogue Websites

Automatic Detection of Vrusstatuscheck.com

Vrusstatuscheck.com has typically the following processes in memory:

• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
• %Program Files%\Personal Antivirus\PerAvir.exe

Vrusstatuscheck.com creates the following registry entries:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”

Important Article Disclaimer