Threat Database Browser Hijackers Onlinescanner90.com

Onlinescanner90.com

Onlinescanner90.com is a malicious webpage with browser hijacker functionalities. Onlinescanner90.com is typically encountered by users that have been infected with a Trojan related to the contaminated webpage. Once the Trojan has entered a system it will modify the hosts file causing victims' browsers to be constantly redirected to Onlinescanner90.com. Onlinescanner90.com will then run a fake online scan and display fake results of multiple malware infections.

Onlinescanner90.com will also bombard victims with pop-ups and security warnings in order to persuade them that their computers are dangerously infected and they need to purchase a licensed copy of Antivir. Antivir is a rogue anti-spyware program promoted by Onlinescanner90.com. Onlinescanner90.com and Antivir should be removed as soon as they are detected.

File System Details

Onlinescanner90.com may create the following file(s):
# File Name Detections
1. %WINDOWS%\system32\UpdateCheck.dll
2. %Program Files%\AV\antivir.exe
3. %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk
4. %Documents and Settings%\All Users\Start Menu\AV\Antivir.lnk
5. %Program Files%\Common Files\Uninstall\AV\Uninstall.lnk
6. %UserProfile%\Desktop\Antivir.ln
7. %Program Files%\Common Files\Uninstall\AV

Registry Details

Onlinescanner90.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\EVAACD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV"
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}

Trending

Most Viewed

Loading...