Threat Database Rogue Websites SecurityHelpCenter.com

SecurityHelpCenter.com

Securityhelpcenter.com is a browser hijacker promoting the rogue anti-spyware application Personal Antivirus. Typically your computer becomes infected with a backdoor trojan that modifies your browser settings in order to redirect you to the Securityhelpcenter.com domain. Usually, though, when you attempt to visit certain websites, Securityhelpcenter.com redirects you to this warning:

"Warning! Visiting this site may harm your computer! This web site probably contains malicious software program, which can cause damage to your computer or perform actions without your permission. Your computer may be infected after visiting such a web site. We recommend you to install (or activate) antivirus security software."

This is when you are suggested to purchase and download Personal Antivirus in order to protect your system from infection. Unfortunately, Personal Antivirus is an infection in itself, and should be avoided.

File System Details

SecurityHelpCenter.com creates the following file(s):
# File Name Detections
1. c:\Program Files\Personal Antivirus\Explorer.ico N/A
2. c:\Program Files\Personal Antivirus\db N/A
3. c:\Program Files\Personal Antivirus\db\ia080618x.db N/A
4. c:\Program Files\Personal Antivirus\Languages\IAFr.lng N/A
5. c:\WINDOWS\system32\log.txt N/A
6. c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk N/A
7. %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk N/A
8. %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png N/A
9. %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk N/A
10. %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf N/A
11. %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini N/A
12. c:\Program Files\Personal Antivirus\activate.ico N/A
13. c:\Program Files\Personal Antivirus\working.log N/A
14. c:\Program Files\Personal Antivirus\db\ia080614.db N/A
15. c:\Program Files\Personal Antivirus\Languages\IAEs.lng N/A
16. c:\Program Files\Personal Antivirus\Languages\IAIt.lng N/A
17. c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus N/A
18. c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk N/A
19. %UserProfile%\Application Data\Personal Antivirus\uill.ini N/A
20. %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png N/A
21. %UserProfile%\Application Data\Personal Antivirus\db\config.cfg N/A
22. %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt N/A
23. c:\Program Files\Personal Antivirus\uninstall.ico N/A
24. c:\Program Files\Personal Antivirus\unins000.dat N/A
25. c:\Program Files\Personal Antivirus\db\DBInfo.ver N/A
26. c:\Program Files\Personal Antivirus\Languages N/A
27. c:\Program Files\Personal Antivirus\Languages\IAGer.lng N/A
28. c:\Documents and Settings\All Users\Desktop\Personal Antivirus.lnk N/A
29. c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk N/A
30. %UserProfile%\Application Data\Personal Antivirus\settings.ini N/A
31. %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png N/A
32. %UserProfile%\Application Data\Personal Antivirus\db N/A
33. %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf N/A

Registry Details

SecurityHelpCenter.com creates the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Personal Antivirus"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine

Trending

Most Viewed

Loading...