Security Scanner

Security Scanner Description

Security Scanner Screenshot 1Security Scanner is a member of the Win32/Winwebsec group of rogue security and anti-spyware scanners, and like others in its group, attempts to swindle victims of their money by creating fake alerts and then requesting you to spend money on its full version as a solution. Due to its focus on web browser redirects to its website, fraudulent system scans and other forms of misinformation, Security Scanner is a threat to your PC, but rogue security programs from its family have also been known to install or be installed by other Trojans that can include more damaging functions than Security Scanner’s own feature set. However, no matter whether Security Scanner is by itself or accompanied by other PC threats, malware experts recommend that you delete Security Scanner by analyzing your computer with an anti-malware product, preferably one that’s been given all available updates to insure the maximum chance of identifying Security Scanner and related Trojans.

The Urgency of Catching Security Scanner in Your Real Anti-Malware Scans

Although its appearance has had minor changes to increase its level of polish, Security Scanner can still be identified as a questionable product due to its grammatically incorrect tag line of ‘Protect your PC on new level’. Security Scanner belongs to the WinWeb Security subgroup of scamware and is a copy of Security Shield, Windows Ultra-Antivirus, Rogue.System Doctor 2014, System Security, Antivirus Defence, Smart Fortress 2012, Futurro Antivirus, Winweb Security, Antivirus Security Pro 2013, Advanced Security Tool 2010, Antiviral Factory 2013, Disk Antivirus Professional, Smart Protection 2012, Antivirus Center, Antivirus Security Pro, System Security 2012, Windows Attacks Preventor, Antivirus Security Pro 2014, Antimalware - Proven Antivirus Protection, Windows Secure Kit 2012, Antivirus System, Security Scanner 2012, Live Security Professional, System Progressive Protection, Personal Shield Pro, Antivirus Security 2013, Security Monitor 2012, MS Removal Tool, Security Tool, System Tool 2011, Microsoft Antivirus 2013, Sinergia Cleaner, AntiSpyware Pro 2009, Advanced PC Shield 2012, Windows Secure Kit 2011, AVASoft Antivirus Professional, Total Security, Total Security 2009, System Adware Scanner 2010, Smart Guard Protection, System Care Antivirus, Antivirus Security, Security Shield 2012, Live Essential Platinum, Attentive Antivirus and Dream Scan Soft. This minor slip in Security Scanner’s aesthetics is only scratching the surface of Security Scanner’s fraudulent nature; however, as malware researchers have also noted Security Scanner’s tendencies to launch fake system scans, enable its own startup without permission and create fraudulent warning messages.

Along with browser redirects to Security Scanner’s site, these features are used to promote Security Scanner’s fake security features in the hope that you’ll spend money to remove these errors.

» Learn more about SpyHunter's Spyware Detection Tool
and steps to uninstall SpyHunter.

However, since errors from Security Scanner are fake and unlinked to your computer’s real health, it’s not recommended that you buy a registered version of Security Scanner. Web browser redirects may be preventable by altering your LAN settings to avoid usage of proxy servers, but this should be considered to be just a stopgap measure prior to proper removal of Security Scanner.

Walking Through the Links of a Security Scanner Infection Attack

Rogue security scanners from Security Scanner’s family, such as Security Shield, Windows Secure Kit 2011, Security Tool, Personal Shield Pro, Security Sphere 2012> and Essential Cleaner occasionally may include the ability to download and install other PC threats, including Trojans or worms. More often than this, however, Security Scanner and its cousins are themselves installed by Trojans (such as TROJ_DOFOIL.GE) that infect new computers via spam e-mail messages or via web redirects. Other PC threats that have been associated with Security Scanner’s family include Mal/FakeAV-PY, Mal/SEORed-A, and the ‘‘FDIC notification’ phishing email.

Accordingly, malware analysts recommend the following means of avoid infection by Security Scanner:
  • Using a secure web browser with high safety settings to minimize malicious redirects and drive-by-downloads.
  • Avoiding links and file attachments from unusual e-mail messages, especially messages that appear to be similar to known types of mass-mailed e-mail hoaxes.
  • Keeping anti-malware software accessible and updated for detection and prevention of Security Scanner-related attacks as they happen.

Why Can’t I Open Any Program Including SpyHunter?

Security Scanner blocks legitimate Windows programs from executing and Internet access. Here are two ways to download and install SpyHunter:

Option #1
  • Once Security Scanner’s fake scan is complete, click the ‘Remove’ link, then click ‘Yes, activate Security Scanner’ and Security Scanner’s purchase page will load.
  • On Security Scanner’s purchase page, click anywhere on the page to make it active, press Ctrl+N, a new browser window will open and you’ll gain access to the Internet.
  • Then, click here to download SpyHunter’s malware scanner.

Option #2
  • Download SpyHunter’s malware scanner from a clean computer, copy it to a USB thumb drive, DVD or CD.
  • Then, use the SpyHunter copied version to install SpyHunter on the infected PC and run SpyHunter’s malware scanner.

Security Scanner Automatic Detection Tool (Recommended)

Is your PC infected with Security Scanner? To safely & quickly detect Security Scanner, we highly recommend you…

Visual & GUI Characteristics

Security Scanner Screenshot 2Security Scanner Screenshot 3Security Scanner Screenshot 4Security Scanner Screenshot 5Security Scanner Screenshot 6Security Scanner Screenshot 7Security Scanner Screenshot 8

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
  • The following files were created in the system:
    # File Name
    1 %LocalAppData%\[RANDOM CHARACTERS].exe

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM CHARACTERS]"

Additional Information

  • The following messages's were detected:
    # Message
    1Security Scanner Warning
    Harmful software have been detected at your PC.
    Click here to deactivate it.
    2Security Scanner Warning
    Security Scanner has found viruses at your system.
    We highly recommend to get license for Security Scanner to remove harmful software now.
    3Security Scanner Warning
    Spyware.IEMonster process is found. This is virus that is trying to send your passwords from Internet browser (Explorer, Mozilla Firefox, Outlook & others) for the third-parties.
    Click here to protect your data with Security Scanner.
    4Warning message from Internet browser. This page under virus attack. This may crash your system.
    This may be caused by:
    • Virus content founded at this site trying to install its components.
    • Malicious & unknown network processes are determined.
    • Your system is under virus attack.
    • Negative references from other citizens concerning this web page.
    • Your system ports and backdoors have been checked by visited page for external access.
    • Obtain a license of "Security Scanner" to protect your PC for the safest browsing Internet pages (desirable)
    • Launch spyware, virus and malware scanning process.
    • Keep browsing
    5winword.exe is infected with Backdoor:Win32/Samsteal.A.dr.
    Do you want to register your copy and remove all threats now?
Posted: February 12, 2012 | By
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (2 votes, average: 3.00 out of 5)
Loading ... Loading ...
Threat Metric
Threat Level: 10/10
Detection Count: 49


Leave a Reply

What is 11 + 8 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)