Gersoft.info
Gersoft.info is a browser hijacker promoting the distribution of the rogue anti-spyware application known as System Security 2009. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Gersoft.info domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing and downloading the fake spyware remover System Security 2009.
File System Details
Gersoft.info may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe | |
| 2. | %UserProfile%\Desktop\System Security 2009.lnk | |
| 3. | %\Documents and Settings%\All Users\Application Data\00308937\config.udb | |
| 4. | %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk | |
| 5. | %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins | |
| 6. | %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk |
Registry Details
Gersoft.info may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "00308937"
HKEY_LOCAL_MACHINE\Software\00308937
