Home Rogue Websites Fullpcvirusscan.com

Fullpcvirusscan.com

Posted: May 21, 2009

Fullpcvirusscan.com is a rogue website sponsoring the fake spyware remover known as System Security 2009. With the help of affiliated trojans infiltrating your computer through security vulnerabilities and altering your browser configuration, you will find that your web-surfing activities become interrupted and diverted to the Fullpcvirusscan.com web page. Once here, your PC is subject to a false online scan that displays fabricated infection results, all in order to scare you into purchasing System Security 2009.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe
    2 %\Documents and Settings%\All Users\Application Data\00308937\config.udb
    3 %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
    4 %UserProfile%\Desktop\System Security 2009.lnk
    5 %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk
    6 %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\00308937HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "00308937"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SystemSecurity2009

Additional Information on Fullpcvirusscan.com

  • The following domains were detected:
    # Domain
    1 Fullpcvirusscan.com
Loading...