Home Rogue Websites Globalsecurityscan.com

Globalsecurityscan.com

Posted: April 21, 2009

Globalsecurityscan.com is a web browser hijacker that promotes the rogue anti-spyware application called System Security 2009 (sometimes called System Security). Normally your computer will become infected with a backdoor trojan Zlob that modifies your browser settings in order to divert any and all web-surfing activities to the Globalsecurityscan.com webpage. Here you will be subjected to a fake online scan that reports - by way of numerous annoying pop-ups - that your system is infected, and it is suggested you purchase and install System Security 2009 in order to combat these fictitious parasites.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe
    2 %\Documents and Settings%\All Users\Application Data\00308937\config.udb
    3 %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
    4 %UserProfile%\Desktop\System Security 2009.lnk
    5 %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk
    6 %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\00308937HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "00308937"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SystemSecurity2009
Loading...