Security-mechanic.com

By GoldSparrow in Rogue Websites

Translate To:

Security-mechanic.com is a browser hijacker promoting the distribution of the rogue anti-spyware application known as Security Mechanic. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Security-mechanic.com domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing the fake spyware remover Security Mechanic.

File System Details

Security-mechanic.com creates the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%UserProfile%\Application Data\Microsoft\windll32.exe	N/A
Name: %UserProfile%\Application Data\Microsoft\windll32.exe Type: Executable File
2.	%UserProfile%\Application Data\shellex.dll	N/A
Name: %UserProfile%\Application Data\shellex.dll Type: Dynamic link library
3.	%UserProfile%\Application Data\setup.exe	N/A
Name: %UserProfile%\Application Data\setup.exe Type: Executable File
4.	%UserProfile%\Application Data\lsascs.exe	N/A
Name: %UserProfile%\Application Data\lsascs.exe Type: Executable File
5.	%WINDOWS\System32\spyprotector.cpl	N/A
Name: %WINDOWS\System32\spyprotector.cpl
6.	%UserProfile%\Application Data\spyprotector	N/A
Name: %UserProfile%\Application Data\spyprotector
7.	%Documents and Settings%\[User]\Application Data\SpyProtector\SC_Config.ini	N/A
Name: %Documents and Settings%\[User]\Application Data\SpyProtector\SC_Config.ini
8.	%ProgramFiles%\Security Mechanic	N/A
Name: %ProgramFiles%\Security Mechanic
9.	%Documents and Settings%\[User]\Application Data\SpyProtector\SC_Base_new.dat	N/A
Name: %Documents and Settings%\[User]\Application Data\SpyProtector\SC_Base_new.dat Type: Data file