Home Rogue Websites Networkstabilityscan.com

Networkstabilityscan.com

Posted: April 7, 2009

Networkstabilityscan.com is a malicious website that promotes the rogue anti-spyware application System Security 2009, which is dangerous and should be avoided at all costs. The Networkstabilityscan.com domain is hit after you have been infected with a Trojan virus that sneaks into your system via backdoor techniques and vulnerabilities in your security software, without your knowledge or consent.

This Trojan modifies your browser settings in order to redirect your web-surfing activities to the Networkstabilityscan.com web page, where you will witness a fraudulent scanner that runs inside a window resembling My Computer interface and then reports a variety of false infections. This is soon followed by an onslaught of annoying pop-ups that try to convince you to purchase and install System Security 2009. This rogue anti-spyware is known to make your PC operate much slower and cause problems for your internet connection.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe
    2 %\Documents and Settings%\All Users\Application Data\00308937\config.udb
    3 %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
    4 %UserProfile%\Desktop\System Security 2009.lnk
    5 %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk
    6 %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\00308937HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run g00308937HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SystemSecurity2009
Loading...