Mega-scan-pc-new14.biz
Mega-scan-pc-new14.biz is a misleading website that advertises rogue security applications such as Security Essentials 2010. Mega-scan-pc-new14.biz secretly enters victims' systems with the help of Trojans which hijack web browsers and redirect victims' searches to the malicious domain. A fake system scan, security notifications and pop-up messages will then be displayed in order to trick victims into thinking that their systems are infected. These fake security messages are displayed to coerce victims into purchasing Security Essentials 2010 which will apparently remove the "detected" malware. Use a recognized security tool to remove this browser hijacker and do not waste your money on Security Essentials 2010.
File System Details
Mega-scan-pc-new14.biz may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Temp%\[randomnumbers].exe | |
| 2. | %Documents and Settings%\[UserName]\Application Data\[randomnumbers].exe | |
| 3. | %System%\winlogon32.exe | |
| 4. | %Program Files%\Securityessentials2010\SE2010.exe | |
| 5. | %System%\smss32.exe | |
| 6. | %Temp%\[randomnumbers].dll | |
| 7. | %Documents and Settings%\[UserName]\Start Menu\Security essentials 2010.lnk | |
| 8. | %Documents and Settings%\[UserName]\Desktop\Security essentials 2010.lnk | |
| 9. | %Program Files%\Securityessentials2010\ |
Registry Details
Mega-scan-pc-new14.biz may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
