Home Malware Programs Browser Hijackers Total-scan.net

Total-scan.net

Posted: February 15, 2010

Total-scan.net is a corrupt website and browser hijacker which urges computer users to buy the Security Tool rogue antivirus application. Total-scan.net resembles My Computer, and appears to be a legitimate Windows interface but is in fact very misleading. Total-scan.net poduces a fake security scan with bogus results claiming the system is infected with malware. Soon the unwary user will be urged to purchase a registered version of Security Tool. This is a blatant scam to pilfer money from hapless victims. Do not fall for this trickery and have Total-scan.net and all threats related to Security Tool removed immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Application Data\4946550101
    2 %UserProfile%\Application Data\4946550101\[random number].bat
    3 %UserProfile%\Application Data\4946550101\[random number].cfg
    4 %UserProfile%\Application Data\4946550101\[random number].exe
    5 %UserProfile%\Desktop\Security Tool.lnk
    6 %UserProfile%\Start Menu\Programs\Security Tool.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Security ToolHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random number]"
Loading...