Home Rogue Websites Free-web-scaners.info

Free-web-scaners.info

Posted: April 15, 2009

Free-web-scaners.info is a browser hijacker of malicious intent, endorsing the rogue anti-spyware applications called Antivirus XP Pro 2009 and System Security 2009. You'll find simply entering this URL into the corresponding browser bar, you will find yourself at a seemingly harmless web page. However, this particular domain entered with certain extensions will bring you to aggressive online scanners performed by Antivirus XP Pro 2009 (Free-web-scaners.info/scan/) or System Security 2009 (Free-web-scaners.info/disk/).

Backdoor trojans cause browser modification after infiltrating your PC, causing you to be redirected to the extended versions of Free-web-scaners.info domain. Here you will witness a false system scan that reports various infections on your system, in order to scare you into purchasing and installing the sponsored rogue anti-spyware program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe
    2 %\Documents and Settings%\All Users\Application Data\00308937\config.udb
    3 %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
    4 %UserProfile%\Desktop\System Security 2009.lnk
    5 %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk
    6 %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\00308937HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "00308937"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SystemSecurity2009
Loading...