Www1.setupclean-softpc.in

By LoneStar in Browser Hijackers

Translate To:

Www1.setupclean-softpc.in is a malicious webpage that assists in the distribution and promotion of Security Antivirus - a rogue security program. Www1.setupclean-softpc.in is inserted into unsuspecting victims' browsers by stealthy Trojans. This will cause the victims to be frequently redirected to www1.setupclean-softpc.in where a fake online system scan will be conducted. Exaggerated scan reports, security alerts and pop-ups will be generated in order to convince the victims that their machines are infected with malware that can only be removed with the "full" version of Security Antivirus. Do not waste your money on Security Antivirus and use a decent security tool to rid your PC of www1.setupclean-softpc.in.

File System Details

Www1.setupclean-softpc.in may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
Name: %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll Type: Dynamic link library
2.	%Documents and Settings%\[UserName]\Recent\DBOLE.sys
Name: %Documents and Settings%\[UserName]\Recent\DBOLE.sys Type: System file
3.	%Documents and Settings%\[UserName]\Recent\PE.exe
Name: %Documents and Settings%\[UserName]\Recent\PE.exe Type: Executable File
4.	%Documents and Settings%\[UserName]\Recent\std.exe
Name: %Documents and Settings%\[UserName]\Recent\std.exe Type: Executable File
5.	%Documents and Settings%\All Users\Application Data\345d567\SA345d.exe
Name: %Documents and Settings%\All Users\Application Data\345d567\SA345d.exe Type: Executable File
6.	%Documents and Settings%\[UserName]\Recent\cid.dll
Name: %Documents and Settings%\[UserName]\Recent\cid.dll Type: Dynamic link library
7.	%Documents and Settings%\[UserName]\Recent\ddv.sys
Name: %Documents and Settings%\[UserName]\Recent\ddv.sys Type: System file
8.	%Documents and Settings%\[UserName]\Recent\runddlkey.dll
Name: %Documents and Settings%\[UserName]\Recent\runddlkey.dll Type: Dynamic link library
9.	%Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
Name: %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll Type: Dynamic link library
10.	%Documents and Settings%\[UserName]\Recent\ANTIGEN.exe
Name: %Documents and Settings%\[UserName]\Recent\ANTIGEN.exe Type: Executable File
11.	%Documents and Settings%\[UserName]\Recent\ddv.dll
Name: %Documents and Settings%\[UserName]\Recent\ddv.dll Type: Dynamic link library
12.	%Documents and Settings%\[UserName]\Recent\PE.sys
Name: %Documents and Settings%\[UserName]\Recent\PE.sys Type: System file
13.	%Documents and Settings%\[UserName]\Recent\tjd.sys
Name: %Documents and Settings%\[UserName]\Recent\tjd.sys Type: System file
14.	%Documents and Settings%\All Users\Application Data\345d567\SAV.ico
Name: %Documents and Settings%\All Users\Application Data\345d567\SAV.ico
15.	%Documents and Settings%\All Users\Application Data\345d567\BackUp\Adobe Reader Synchronizer.lnk
Name: %Documents and Settings%\All Users\Application Data\345d567\BackUp\Adobe Reader Synchronizer.lnk Type: Shortcut
16.	%Documents and Settings%\All Users\Application Data\345d567\SAVSys\vd952342.bd
Name: %Documents and Settings%\All Users\Application Data\345d567\SAVSys\vd952342.bd
17.	%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Antivirus.lnk
Name: %Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Antivirus.lnk Type: Shortcut
18.	%Documents and Settings%\[UserName]\Recent\ANTIGEN.drv
Name: %Documents and Settings%\[UserName]\Recent\ANTIGEN.drv Type: Device Driver
19.	%Documents and Settings%\[UserName]\Recent\FS.drv
Name: %Documents and Settings%\[UserName]\Recent\FS.drv Type: Device Driver
20.	%Documents and Settings%\[UserName]\Recent\PE.tmp
Name: %Documents and Settings%\[UserName]\Recent\PE.tmp Type: Temporary File
21.	%Documents and Settings%\[UserName]\Start Menu\Programs\Security Antivirus.lnk
Name: %Documents and Settings%\[UserName]\Start Menu\Programs\Security Antivirus.lnk Type: Shortcut
22.	%Documents and Settings%\All Users\Application Data\345d567\72.mof
Name: %Documents and Settings%\All Users\Application Data\345d567\72.mof
23.	%Documents and Settings%\All Users\Application Data\345d567\BackUp\Adobe Reader Speed Launch.lnk
Name: %Documents and Settings%\All Users\Application Data\345d567\BackUp\Adobe Reader Speed Launch.lnk Type: Shortcut
24.	%Documents and Settings%\All Users\Application Data\345d567\SAVSys
Name: %Documents and Settings%\All Users\Application Data\345d567\SAVSys
25.	%Documents and Settings%\[UserName]\Application Data\Security Antivirus
Name: %Documents and Settings%\[UserName]\Application Data\Security Antivirus
26.	%Documents and Settings%\[UserName]\Desktop\Security Antivirus.lnk
Name: %Documents and Settings%\[UserName]\Desktop\Security Antivirus.lnk Type: Shortcut
27.	%Documents and Settings%\[UserName]\Recent\energy.tmp
Name: %Documents and Settings%\[UserName]\Recent\energy.tmp Type: Temporary File
28.	%Documents and Settings%\[UserName]\Recent\PE.drv
Name: %Documents and Settings%\[UserName]\Recent\PE.drv Type: Device Driver
29.	%Documents and Settings%\[UserName]\Start Menu\Security Antivirus.lnk
Name: %Documents and Settings%\[UserName]\Start Menu\Security Antivirus.lnk Type: Shortcut
30.	%Documents and Settings%\All Users\Application Data\345d567
Name: %Documents and Settings%\All Users\Application Data\345d567
31.	%Documents and Settings%\All Users\Application Data\345d567\BackUp
Name: %Documents and Settings%\All Users\Application Data\345d567\BackUp
32.	%Documents and Settings%\All Users\Application Data\345d567\Quarantine Items
Name: %Documents and Settings%\All Users\Application Data\345d567\Quarantine Items
33.	%Documents and Settings%\All Users\Application Data\SADFIOPODIV\SAAKDUPV.cfg
Name: %Documents and Settings%\All Users\Application Data\SADFIOPODIV\SAAKDUPV.cfg
34.	%Documents and Settings%\[UserName]\Application Data\Security Antivirus\cookies.sqlite
Name: %Documents and Settings%\[UserName]\Application Data\Security Antivirus\cookies.sqlite
35.	%Documents and Settings%\[UserName]\Recent\CLSV.drv
Name: %Documents and Settings%\[UserName]\Recent\CLSV.drv Type: Device Driver
36.	%Documents and Settings%\[UserName]\Recent\gid.drv
Name: %Documents and Settings%\[UserName]\Recent\gid.drv Type: Device Driver
37.	%Documents and Settings%\[UserName]\Recent\tjd.drv
Name: %Documents and Settings%\[UserName]\Recent\tjd.drv Type: Device Driver
38.	%Program Files%\Mozilla Firefox\searchplugins\search.xml
Name: %Program Files%\Mozilla Firefox\searchplugins\search.xml

Registry Details

Www1.setupclean-softpc.in may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=195&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"

HKEY_CLASSES_ROOT\SA345d.DocHostUIHandler

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" ="http://127.0.0.1:27777/?inj=%ORIGINAL%"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Antivirus"

HKEY_CURRENT_USER\Software\3

HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=195&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "App/7.00195"

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Www1.setupclean-softpc.in

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen