Home Malware Programs Browser Hijackers Online-spy-scanner.com

Online-spy-scanner.com

Posted: June 27, 2008

Online-spy-scanner.com is a rogue website and browser hijacker from the Trojan.Zlob family. Online-spy-scanner.com may seem like a regular website, but once you've roamed this website you'll see that there's only links to rogue anti-spyware programs like SpyGuarder. You may also suddenly see Online-spy-scanner.com as your default homepage on your browser. Online-spy-scanner.com is similar to SoftHomePage.com, ManageDNS404.com, SafetyAlertings.com, Secureinvites.com, among other browser hijackers.

Online-spy-scanner.com will also display misleading error messages alleging to detect virus threats.

If you click on the fake error message, it will that take you to a program that promises to alleviate the problem but instead it only leads you to the purchase page of a rogue anti-spyware program.

Online-spy-scanner.com fake error message states:

"The page at http://online-spy-scanner.com says:
Warning!!!Your computer contains various signs of viruses and malware programs presence.Your system requires immediate anti viruses check!Spy Guarder will perform a quick and free scanning of your PC for viruses and malicious programs."

Online-spy-scanner.com may prove dangerous to your security and privacy and, therefore, should be avoided at all costs. If Online-spy-scanner.com has already infected your machine, we strongly recommend you to scan your system for Zlob and other possible infections.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\spyguarder.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}%UserProfile%\Application Data\SpyGuarder\Desc.dat%UserProfile%\Application Data\SpyGuarder\SpyGuarder.ini%UserProfile%\Application Data\SpyGuarder\base.dat%UserProfile%\Application Data\SpyGuarder\base2.dat%UserProfile%\Application Data\SpyGuarder\spline.dat
Loading...