Home Malware Programs Browser Hijackers Mega-scan-pc-new13.org

Mega-scan-pc-new13.org

Posted: February 17, 2010

Mega-scan-pc-new13.org is a malicious browser hijacker which promotes the rogue anti-spyware program Security Essentials 2010. Mega-scan-pc-new13.org uses stealthy Trojans to change the system settings so that your browser redirects to a fake scan page which produces bogus results. The scan results claim the system is infected with all sorts of malware and then urges you to purchase Security Essentials 2010, which is in fact useless. Use a proven malware remover to detect and remove all threats associated with Security Essentials 2010 and Mega-scan-pc-new13.org.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[UserName]\Application Data\[randomnumbers].exe
    2 %Documents and Settings%\[UserName]\Desktop\Security essentials 2010.lnk
    3 %Documents and Settings%\[UserName]\Start Menu\Security essentials 2010.lnk
    4 %Program%\Securityessentials2010\SE2010.exe
    5 %System%\smss32.exe
    6 %System%\winlogon32.exe
    7 %Temp%\[randomnumbers].dll
    8 %Temp%\[randomnumbers].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilterHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\DomainsHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktopHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\SystemHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\PhishingFilterHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\DomainsHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktopHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
Loading...