Threat Database Rogue Websites Scan.prescansecurepc.com

Scan.prescansecurepc.com

By Domesticus in Rogue Websites

Scan.prescansecurepc.com is a browser hijacker promoting the distribution of the rogue anti-spyware application known as Smart Protector. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Scan.prescansecurepc.com domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing and downloading the fake spyware remover Smart Protector.

File System Details

Scan.prescansecurepc.com may create the following file(s):
# File Name Detections
1. C:\Documents and Settings\\Application Data\Microsoft\Media Index\Drivers
2. c:\Program Files\Smart Protector\quarantine
3. c:\Program Files\Smart Protector
4. %UserProfile%\Start Menu\Programs\Smart Protector

Registry Details

Scan.prescansecurepc.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Smart Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "smartprotector"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\S

Trending

Most Viewed

Loading...