Home Malware Programs Browser Hijackers Onlinescanner90.com

Onlinescanner90.com

Posted: December 22, 2009

Onlinescanner90.com is a malicious browser hijacker which does not deliver malware directly, but instead produces a set of corrupt websites disguised as system alerts and scan windows. Clicking on any "Yes" may result in adware downloading onto the system via Trojans. Onlinescanner90.com will produce an endless flow of annoying ads and misleadingly state that certain viruses are harming your PC. Onlinescanner90.com also contains a hijacker which redirects web-surfers to Onlinescanner90.com. Once detected, Onlinescanner90.com should immediately be terminated using reliable anti-spyware.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Start Menu\AV\Antivir.lnk
    2 %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk
    3 %Program Files%\AV\antivir.exe
    4 %Program Files%\Common Files\Uninstall\AV
    5 %Program Files%\Common Files\Uninstall\AV\Uninstall.lnk
    6 %UserProfile%\Desktop\Antivir.ln
    7 %WINDOWS%\system32\UpdateCheck.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\EVAACDHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
Loading...