Home Rogue Websites My-computer-scan43.com

My-computer-scan43.com

Posted: October 5, 2009

My-computer-scan43.com is a malicious web page that advertises and pushes the Alpha Antivirus rogue anti-spyware program. Trojan horse infections are known to redirect computer users to the My-computer-scan43.com website. Once visited, a user may notice several misleading warning notifications or popups displayed that attempt to warn them of a computer infection and offer the Alpha Antivirus program to resolve the issue. My-computer-scan43.com is not a trusted source.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Program Files%\AlphaAV
    2 %Program Files%\AlphaAV\AlphaAV.exe
    3 %UserProfile%\Desktop\Alpha Antivirus.lnk
    4 %WINDOWS%\system32\drivers\NDISRD.sys
    5 %WINDOWS%\system32\msnaoladdon.dll
    6 %WINDOWS%\system32\ndisapi.dll
    7 %WINDOWS%\system32\NetFilter.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Alpha AntivirusHKEY_LOCAL_MACHINE\Software\Alpha AntivirusHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Alpha Antivirus"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "AlphaAV"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Alpha Antivirus
Loading...