Home Rogue Websites Best-scanner-2010.com

Best-scanner-2010.com

Posted: July 5, 2010

Best-scanner-2010.com is a rogue website related to Security Essentials 2010. In order to achieve this goal, Trojans infiltrate your computer through system vulnerabilities and alter the browser settings, causing web-surfing activities to be interrupted and diverted to Best-scanner-2010.net. Once here, your PC is subject to a fake online scan that reports fabricated infection results in order to scare you into purchasing the rogue spyware remover Security Essentials 2010.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[UserName]\Application Data\[randomnumbers].exe
    2 %Documents and Settings%\[UserName]\Desktop\Security essentials 2010.lnk
    3 %Documents and Settings%\[UserName]\Start Menu\Security essentials 2010.lnk
    4 %Program Files%\Securityessentials2010\
    5 %Program Files%\Securityessentials2010\SE2010.exe
    6 %System%\smss32.exe
    7 %System%\winlogon32.exe
    8 %Temp%\[randomnumbers].dll
    9 %Temp%\[randomnumbers].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilterHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\DomainsHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktopHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\SystemHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\PhishingFilterHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\DomainsHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktopHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
Loading...