Security Scanner

Security Scanner Description

Security Scanner Screenshot 1Security Scanner is a member of the Win32/Winwebsec group of rogue security and anti-spyware scanners, and like others in its group, attempts to swindle victims of their money by creating fake alerts and then requesting you to spend money on its full version as a solution. Due to its focus on web browser redirects to its website, fraudulent system scans and other forms of misinformation, Security Scanner is a threat to your PC, but rogue security programs from its family have also been known to install or be installed by other Trojans that can include more damaging functions than Security Scanner’s own feature set. However, no matter whether Security Scanner is by itself or accompanied by other PC threats, malware experts recommend that you delete Security Scanner by analyzing your computer with an anti-malware product, preferably one that’s been given all available updates to insure the maximum chance of identifying Security Scanner and related Trojans.

The Urgency of Catching Security Scanner in Your Real Anti-Malware Scans

Although its appearance has had minor changes to increase its level of polish, Security Scanner can still be identified as a questionable product due to its grammatically incorrect tag line of ‘Protect your PC on new level’. Security Scanner belongs to the WinWeb Security subgroup of scamware and is a copy of Dream Scan Soft, AntiSpyware Pro 2009, System Security, Smart Fortress 2012, Sinergia Cleaner, Security Shield 2012, Advanced Security Tool 2010, System Security 2012, Total Security 2009, Live Security Professional, Antimalware - Proven Antivirus Protection, System Tool 2011, Microsoft Antivirus 2013, Antivirus Center, Windows Secure Kit 2012, Antivirus Security Pro 2013, Windows Secure Kit 2011, Antivirus Security, Windows Ultra-Antivirus, Winweb Security, Security Scanner 2012, Smart Guard Protection, Security Shield, Live Security Platinum, Security Monitor 2012, Smart Protection 2012, System Adware Scanner 2010, Antiviral Factory 2013, Disk Antivirus Professional, Personal Shield Pro, MS Removal Tool, System Care Antivirus, Attentive Antivirus, Antivirus Security Pro, Security Sphere 2012, Rogue.System Doctor 2014, Live Essential Platinum, System Progressive Protection, Windows Attacks Preventor, Advanced PC Shield 2012, Security Tool, Total Security, Antivirus Security 2013, Antivirus Security Pro 2014 and Antivirus Defence. This minor slip in Security Scanner’s aesthetics is only scratching the surface of Security Scanner’s fraudulent nature; however, as malware researchers have also noted Security Scanner’s tendencies to launch fake system scans, enable its own startup without permission and create fraudulent warning messages.

Along with browser redirects to Security Scanner’s site, these features are used to promote Security Scanner’s fake security features in the hope that you’ll spend money to remove these errors.

» Learn more about SpyHunter's Spyware Detection Tool
and steps to uninstall SpyHunter.

However, since errors from Security Scanner are fake and unlinked to your computer’s real health, it’s not recommended that you buy a registered version of Security Scanner. Web browser redirects may be preventable by altering your LAN settings to avoid usage of proxy servers, but this should be considered to be just a stopgap measure prior to proper removal of Security Scanner.

Walking Through the Links of a Security Scanner Infection Attack

Rogue security scanners from Security Scanner’s family, such as Security Shield, Windows Secure Kit 2011, Security Tool, Personal Shield Pro, Security Sphere 2012> and Essential Cleaner occasionally may include the ability to download and install other PC threats, including Trojans or worms. More often than this, however, Security Scanner and its cousins are themselves installed by Trojans (such as TROJ_DOFOIL.GE) that infect new computers via spam e-mail messages or via web redirects. Other PC threats that have been associated with Security Scanner’s family include Mal/FakeAV-PY, Mal/SEORed-A, and the ‘‘FDIC notification’ phishing email.

Accordingly, malware analysts recommend the following means of avoid infection by Security Scanner:
  • Using a secure web browser with high safety settings to minimize malicious redirects and drive-by-downloads.
  • Avoiding links and file attachments from unusual e-mail messages, especially messages that appear to be similar to known types of mass-mailed e-mail hoaxes.
  • Keeping anti-malware software accessible and updated for detection and prevention of Security Scanner-related attacks as they happen.

Why Can’t I Open Any Program Including SpyHunter?

Security Scanner blocks legitimate Windows programs from executing and Internet access. Here are two ways to download and install SpyHunter:

Option #1
  • Once Security Scanner’s fake scan is complete, click the ‘Remove’ link, then click ‘Yes, activate Security Scanner’ and Security Scanner’s purchase page will load.
  • On Security Scanner’s purchase page, click anywhere on the page to make it active, press Ctrl+N, a new browser window will open and you’ll gain access to the Internet.
  • Then, click here to download SpyHunter’s malware scanner.

Option #2
  • Download SpyHunter’s malware scanner from a clean computer, copy it to a USB thumb drive, DVD or CD.
  • Then, use the SpyHunter copied version to install SpyHunter on the infected PC and run SpyHunter’s malware scanner.

Security Scanner Automatic Detection Tool (Recommended)

Is your PC infected with Security Scanner? To safely & quickly detect Security Scanner, we highly recommend you…

Visual & GUI Characteristics

Security Scanner Screenshot 2Security Scanner Screenshot 3Security Scanner Screenshot 4Security Scanner Screenshot 5Security Scanner Screenshot 6Security Scanner Screenshot 7Security Scanner Screenshot 8

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
  • The following files were created in the system:
    # File Name
    1 %LocalAppData%\[RANDOM CHARACTERS].exe

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM CHARACTERS]"

Additional Information

  • The following messages's were detected:
    # Message
    1Security Scanner Warning
    Harmful software have been detected at your PC.
    Click here to deactivate it.
    2Security Scanner Warning
    Security Scanner has found viruses at your system.
    We highly recommend to get license for Security Scanner to remove harmful software now.
    3Security Scanner Warning
    Spyware.IEMonster process is found. This is virus that is trying to send your passwords from Internet browser (Explorer, Mozilla Firefox, Outlook & others) for the third-parties.
    Click here to protect your data with Security Scanner.
    4Warning message from Internet browser. This page under virus attack. This may crash your system.
    This may be caused by:
    • Virus content founded at this site trying to install its components.
    • Malicious & unknown network processes are determined.
    • Your system is under virus attack.
    • Negative references from other citizens concerning this web page.
    • Your system ports and backdoors have been checked by visited page for external access.
    • Obtain a license of "Security Scanner" to protect your PC for the safest browsing Internet pages (desirable)
    • Launch spyware, virus and malware scanning process.
    • Keep browsing
    5winword.exe is infected with Backdoor:Win32/Samsteal.A.dr.
    Do you want to register your copy and remove all threats now?
Posted: February 12, 2012 | By
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (2 votes, average: 3.00 out of 5)
Loading ... Loading ...
Threat Metric
Threat Level: 10/10
Detection Count: 49


Leave a Reply

What is 6 + 12 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)