Totalifght.com
Totalifght.com is a deceitful website that is involved in the promotion and distribution of Virus Protector. Once a user visits Totalifght.com a fake online system scan will be conducted which will automatically inform the user that his/her system is infected with numerous computer parasites. The user will then be prompted to purchase the "full" version of Virus Protector in order to get rid of all the "detected" threats. Totalifght.com is not to be trusted and users should never waste their money on the useless Virus Protector application.
File System Details
Totalifght.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Documents and Settings%\[UserName]\Application Data\[random].dll | |
| 2. | %Program Files%\Internet Explorer\[random].exe | |
| 3. | %WINDOWS%\[random].dll | |
| 4. | %WINDOWS%\system32\drivers\[random].exe | |
| 5. | %Documents and Settings%\[UserName]\Application Data\[random].exe | |
| 6. | %Documents and Settings%\[UserName]\Local Settings\Temp\[random].dll | |
| 7. | %WINDOWS%\[random].exe | |
| 8. | %WINDOWS%\system32\[random].dll | |
| 9. | [random].exe | |
| 10. | %Documents and Settings%\[UserName]\Local Settings\Temp\[random].exe | |
| 11. | %Program Files%\Internet Explorer\[random].dll | |
| 12. | %WINDOWS%\system32\[random].exe | |
| 13. | %WINDOWS%\system32\drivers\[random].dll |
Registry Details
Totalifght.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs" = "[random].dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "LoadAppInit_DLLs" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Protector"
