Home Rogue Websites Pcworldsecurity.cn

Pcworldsecurity.cn

Posted: December 4, 2009

Pcworldsecurity.cn is a rogue website (malware website or malware domain) that is set up to distribute malware and steal the user's personal information for illegal or malicious purposes. A common trend among malware makers is to create rogue websites to entice users to download, install and then purchase rogue security software. Rogue websites provide several false claims when describing the rogue application that it is promoting. Pcworldsecurity.cn poses a severe threat to the safety of your PC and should be removed immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 Alpha Antivirus.lnk
    2 AlphaAV.exe
    3 msnaoladdon.dll
    4 ndisapi.dll
    5 NetFilter.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Alpha AntivirusHKEY_LOCAL_MACHINE\Software\Alpha AntivirusHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Alpha Antivirus"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "AlphaAV"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Alpha Antivirus
Loading...