Home Rogue Websites Free-webscaners.com

Free-webscaners.com

Posted: May 7, 2009

Free-webscaners.com is a browser hijacker sponsoring the spread of the rogue anti-spyware program called Antivirus XP Pro. Due to affiliated trojans infiltrating your system via security exploits and altering your browser settings, you will find your web-surfing activities being diverted to the free-webscaners.com domain. Here you are subject to a fake online scan that displays numerous annoying pop-up ads claiming your system is infected. This is when free-webscaners.com suggests you purchase and download Antivirus XP Pro.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Program Files%\AntivirusXP
    2 %Program Files%\AntivirusXP\AntivirusXP.exe
    3 %Program Files%\AntivirusXP\Infected
    4 %Program Files%\AntivirusXP\Suspicious
    5 %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusXP.lnk
    6 %UserProfile%\Desktop\AntivirusXP.lnk
    7 %UserProfile%\Start Menu\Programs\AntivirusXP
    8 %UserProfile%\Start Menu\Programs\AntivirusXP\AntivirusXP.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\AntivirusXPHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AntivirusXP.exe"
Loading...