Threat Database Rogue Websites Xvirusdescan.com

Xvirusdescan.com

Xvirusdescan.com is a browser hijacker promoting the rogue anti-spyware application called System Security 2009. Due to affiliated trojans infiltrating your system via security exploits and modifying browser settings, web-surfing activities are typically interrupted and then redirected to the Xvirusdescan.com domain. Here a fake online scan results in fictitious infection reports that are used to persuade you to purchase the fake spyware remover System Security 2009.

File System Details

Xvirusdescan.com may create the following file(s):
# File Name Detections
1. %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe
2. %UserProfile%\Desktop\System Security 2009.lnk
3. %\Documents and Settings%\All Users\Application Data\00308937\config.udb
4. %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk
5. %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
6. %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk

Registry Details

Xvirusdescan.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "00308937"
HKEY_LOCAL_MACHINE\Software\00308937

Trending

Most Viewed

Loading...