Home Rogue Websites BrowserSpywareCheck.com

BrowserSpywareCheck.com

Posted: September 28, 2009

BrowserSpywareCheck.com is a malicious website designed to promote and sell the rogue anti-spyware program called Alpha Antivirus. BrowserSpywareCheck.com is known to use fabricated warning messages and offer the Alpha Antivirus application as a solution to the issue. BrowserSpywareCheck.com and the Alpha Antivirus program are part of a ploy to get unsuspecting computer users to purchase fake security software. BrowserSpywareCheck.com can also change certain settings on web browser applications which can lead to redirecting computer users to other unwanted websites.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\Alpha Antivirus
    2 %Documents and Settings%\All Users\Start Menu\Programs\Alpha Antivirus
    3 %Program Files%\Alpha Antivirus
    4 Alpha Antivirus.lnk
    5 AlphaAntivirus.exe
    6 Uninstall Alpha Antivirus.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Alpha AntivirusHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Alpha Antivirus"HKEY_LOCAL_MACHINE\SOFTWARE\Alpha AntivirusHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Alpha Antivirus
Loading...