Home Rogue Websites PowerfullAntivirusScan.com

PowerfullAntivirusScan.com

Posted: November 13, 2008

PowerfullAntivirusScan.com is a rogue website that assaults your computer screen with fake security alerts in order to convince you to purchase the useless Antivirus 2009 Protection program. Do NOT purchase any software from this rogue site. The real security alert is the presence of Antivirus 2009 Protection on your computer which should be removed as soon as possible.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 duzakwq.dll
    2 gtawclv.dll
    3 icmntr.exe
    4 icthis.exe
    5 ictun.exe
    6 icun.exe
    7 isfmm.exe
    8 isfmntr.exe
    9 isfun.exe
    10 msmsgs.exe
    11 nvctrl.exe
    12 Online Security Guide.url
    13 pmmon.exe
    14 Security Troubleshooting.url
    15 spwoqbmv.exe
    16 VideoAccessCodecInstall.exe
    17 xbaqktfv.exe
    18 zafhemm.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}IExplorer Security Plug-inInternet Explorer Secure Bar
Loading...