Checkliet.com

Checkliet.com is a criminal website that comes with a downloader for the fake security program called Virus Protector. Users typically encounter Checkliet.com if a browser hijacking Trojan has infected their machines. Checkliet.com is disguised as a My Computer window that is embedded into a webpage structure. This is done to trick users into thinking it is legitimate. On the very same webpage, Checkliet.com will conduct a fake online system scan which will automatically report that the system is infested with dangerous malware. Then the victim will be prompted to purchase Virus Protector in order to remove all the harmful malware that was "detected". Do not fall for this scam; Checkliet.com is a malicious websites that promotes illegitimate software.

File System Details

Checkliet.com may create the following file(s):
# File Name Detections
1. %Documents and Settings%\[UserName]\Local Settings\Temp\[random].exe
2. %Program Files%\Internet Explorer\[random].dll
3. %WINDOWS%\system32\[random].exe
4. %WINDOWS%\system32\drivers\[random].dll
5. %Documents and Settings%\[UserName]\Application Data\[random].exe
6. %Program Files%\Internet Explorer\[random].exe
7. %WINDOWS%\[random].dll
8. %WINDOWS%\system32\drivers\[random].exe
9. %Documents and Settings%\[UserName]\Application Data\[random].dll
10. %Documents and Settings%\[UserName]\Local Settings\Temp\[random].dll
11. %WINDOWS%\[random].exe
12. %WINDOWS%\system32\[random].dll

Registry Details

Checkliet.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs" = "[random].dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "LoadAppInit_DLLs" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Protector"

Trending

Most Viewed

Loading...