Home Rogue Websites Pc-scanner-2010.biz

Pc-scanner-2010.biz

Posted: January 25, 2010

Pc-scanner-2010.biz is very annoying and hard to exit website. If a user has Trojans related to Internet Security 2010 - a bogus antivirus program - on his/her computer, he/she will be frequently redirected to the Pc-scanner-2010.biz website. Pc-scanner-2010.biz pretends to scan your computer and detect malicious infections. Whether there are or there are no parasites on your PC, Pc-scanner-2010.biz will definitely detect numerous malware.

This tricky activity is needed to convince a user that he/she needs to recover his/her system, which is supposedly infected. Pc-scanner-2010.biz will then advise the victim to purchase the "full version" of Internet Security 2010 after the online scan is complete. Pc-scanner-2010.biz is very misleading and can't be relied upon.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Program Files%\InternetSecurity2010
    2 %Program Files%\InternetSecurity2010\IS2010.exe
    3 %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
    4 %UserProfile%\Desktop\Internet Security 2010.lnk
    5 %UserProfile%\Start Menu\Internet Security 2010.lnk
    6 %WINDOWS%\system32\41.exe
    7 %WINDOWS%\system32\winhelper86.dll
    8 %WINDOWS%\system32\winlogon86.exe
    9 %WINDOWS%\system32\winupdate86.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\IS2010HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Security 2010"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winupdate86.exe"
Loading...