Threat Database Browser Hijackers Secure-your-pc.info

Secure-your-pc.info

Secure-your-pc.info aka Scanner.secure-your-pc.info is a criminal website that promotes the rogue security software called Antivirus. Secure-your-pc.info is planted into victims' browsers by sneaky Trojans. When a user visits Secure-your-pc.info a number of security alerts and pop-up warning messages will be displayed. If a user clicks on any of these fake security notifications he/she will be redirected to Scanner.secure-your-pc.info, where a fake online system scan will be conducted. The scan will report that the system is infested with dangerous malware that can only be removed with the purchase of the "full version" of Antivirus. Ensure that you do not provide your banking details and purchase Antivirus; it is a useless application. The frequent redirects to Secure-your-pc.info can be stopped by removing the Trojans associated with the domain.

File System Details

Secure-your-pc.info may create the following file(s):
# File Name Detections
1. %Program Files%\Antivirus\AvBho.dll
2. %Program Files%\Antivirus\Antivirus.exe
3. %Program Files%\Antivirus\wscsvc32.exe
4. %Temp%\winupd64x.exe
5. %Program Files%\Antivirus\Uninstall.exe
6. %Documents and Settings%\All Users\Start Menu\Programs\Antivirus
7. %Documents and Settings%\All Users\Desktop\Antivirus.lnk
8. %Program Files%\Antivirus
9. %AppData%\Microsoft\Internet Explorer\Quick Launch\Antivirus.lnk

Registry Details

Secure-your-pc.info may create the following registry entry or registry entries:
HKEY_CLASSES_ROOT\CLSID\{9d541c6a-573b-4888-b35e-6816e68c3620}
HKEY_CLASSES_ROOT\TypeLib\{65DA0CE6-30D1-4144-A0B6-59BD01372E26}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus
HKEY_CLASSES_ROOT\AvBho.AvBhoApp.1
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9d541c6a-573b-4888-b35e-6816e68c3620}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "wscsvc32.exe"
HKEY_CLASSES_ROOT\AvBho.AvBhoApp
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus.exe"

Trending

Most Viewed

Loading...