Home Malware Programs Browser Hijackers Bothlok.com

Bothlok.com

Posted: January 29, 2010

Bothlok.com is a malicious browser hijacker which promotes the rogue anti-spyware program PcSecureNet. Bothlok.com will only appear after the system gets infected with a Trojan virus. Bothlok.com is disguised as a page displaying hard drives and some system directories. But Bothlok.com has nothing to do with your PC and the scanner it produces is totally false. The only way to stop Bothlok.com hijacker from redirecting your web browser is to detect and delete the Trogans that hacked into your browser. Use effective anti-spyware software to remove all threats related to PcSecureNet and Bothlok.com.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Desktop\PcSecureNet.lnk
    2 %Documents and Settings%\All Users\Start Menu\Programs\PcSecureNet
    3 %Documents and Settings%\All Users\Start Menu\Programs\PcSecureNet\1 PcSecureNet.lnk
    4 %Documents and Settings%\All Users\Start Menu\Programs\PcSecureNet\2 Homepage.lnk
    5 %Documents and Settings%\All Users\Start Menu\Programs\PcSecureNet\3 Uninstall.lnk
    6 %Program Files%\PcSecureNet Software
    7 %Program Files%\PcSecureNet Software\PcSecureNet
    8 %Program Files%\PcSecureNet Software\PcSecureNet\main_config.xml
    9 %Program Files%\PcSecureNet Software\PcSecureNet\PcSecureNet.exe
    10 %Program Files%\PcSecureNet Software\PcSecureNet\uninstall.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunHKEY_CURRENT_USER\Software\PcSecureNetHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post PlatformHKEY_LOCAL_MACHINE\SOFTWARE\PcSecureNetHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}PcSecureNet
Loading...