User Account Control
User Account Control is a fake security application created by cyber-criminals to swindle users out of their money. User Account Control infiltrates computer systems with the help of Trojans. Once inside a system, User Account Control will simulate a fake system scan and report false results of malware infections. User Account Control will also display fake security alerts and pop-ups in order to scare the victim into purchasing the non-existent full version of User Account Control. User Account Control is an illegitimate application that should be removed upon detection.
File System Details
User Account Control may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %UserProfile%\Application Data\User Account Control\unins000.exe | |
| 2. | %Program Files%\User Account Control\db\WMILib.dll | |
| 3. | %Program Files%\User Account Control\LiveSS.exe | |
| 4. | %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe | |
| 5. | %Documents and Settings%\All Users\Start Menu\Programs\User Account Control\User Account Control Home Page.lnk | |
| 6. | %Program Files%\User Account Control | |
| 7. | %Program Files%\User Account Control\db\lists.ini | |
| 8. | %UserProfile%\Application Data\User Account Control\settings.ini | |
| 9. | %UserProfile%\Application Data\User Account Control\db | |
| 10. | %UserProfile%\Application Data\User Account Control\db\Urls.inf | |
| 11. | %UserProfile%\Desktop\LiveSS.exe.txt | |
| 12. | %Documents and Settings%\All Users\Start Menu\Programs\User Account Control | |
| 13. | %Documents and Settings%\All Users\Start Menu\Programs\User Account Control\Purchase Licence.lnk | |
| 14. | %Program Files%\User Account Control\db\ia080614.db | |
| 15. | %UserProfile%\Application Data\User Account Control | |
| 16. | %UserProfile%\Application Data\User Account Control\Uninstall User Account Control.lnk | |
| 17. | %UserProfile%\Application Data\User Account Control\db\Timeout.inf | |
| 18. | %UserProfile%\Desktop\User Account Control.lnk | |
| 19. | %Documents and Settings%\All Users\Desktop\User Account Control.lnk | |
| 20. | %Documents and Settings%\All Users\Start Menu\Programs\User Account Control\User Account Control.lnk | |
| 21. | %Program Files%\User Account Control\db\DBInfo.ver | |
| 22. | %Program Files%\User Account Control\Languages | |
| 23. | %UserProfile%\Application Data\User Account Control\uill.ini | |
| 24. | %UserProfile%\Application Data\User Account Control\db\config.cfg | |
| 25. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\User Account Control.lnk | |
| 26. | %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini |
Registry Details
User Account Control may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\User Account Control_is1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "uniname" = "User Account Control_is1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent "URLSS[2.0.3.0]"
HKEY_LOCAL_MACHINE\SOFTWARE\User Account Control
HKEY_CURRENT_USER\Software\Microsoft\FTP "SearchDir" = "%Program Files%\User Account Control\"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AVPath" = "\\.\root\SecurityCenter:AntiVirusProduct.instanceGuid="{653E64F8-62B6-4F96-B22D-4FFC6E44130E}""
HKEY_CURRENT_USER\Software\User Account Control
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "User Account Control"
