Programmci.com
Programmci.com is a rogue website related to the Antivirus Scan cyberscam.
Programmci.com hijacks the browser to redirect users to a fake scan page everytime they go online. The scan produces bogus results claiming the PC is infected with malware. The user will then be warned to purchase a copy of Antivirus Scan to remove the alleged threats. Do not click on anything related to this site or Antivirus Scan. Use an effective anti-malware program to remove all threats related to Programmci.com and Antivirus Scan.
File System Modifications
- The following files were created in the system:
# File Name 1 %Temp%\[random]\ 2 %Temp%\[random]\[random].exe
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:59274'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.exe'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"HKEY_CURRENT_USER\Software\[random]
Hi, Im to open up task manager and regedit but it won't let me, my computer keeps giving me a message that says "Application cannot be executed the file is infected." This message pops up when i also try to download the Antivirus software. Is there a way to get around this??
I can't open up task manager and regedit, it keeps saying that the application is infected, is there a way around this?
If you are being blocked restart your computer in safe mode. run msconfig. look for the suspicious startup program in the boot tab. uncheck it. restart in regular mode then run suggested removal steps.
Had the same problem. Had to F8 boot in safemode with networking and then restore system settings from Start-->All Programs-->Accessories-->System Tools-->System Restore. I was unable to do task manager or use either browser without it going to the Programmci site. System Restore was the only thing I could do to fix the problem.