Home Rogue Websites Scanbaseonline.com

Scanbaseonline.com

Posted: April 3, 2009

Scanbaseonline.com is a malicious website that may promote other rogue anti-spyware applications such as System Security. Scanbaseonline.com could very well hijack your web browser making it point to the Scanbaseonline.com home page every time it is loaded. If you ever land on Scanbaseonline.com then you may get many popup messages, which are bogus, stating you have some type of security issue or computer infection. Scanbaseonline.com offers System Security as your solution but it is nothing more than a ploy for getting you to purchase System Security which is a useless application. Removal of the parasite or parasites that could be redirecting your browser to Scanbaseonline.com should be done with a spyware removal tool to avoid further damage to system files.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\538654387
    2 %Documents and Settings%\All Users\Application Data\538654387\1632575944.exe
    3 %Documents and Settings%\All Users\Application Data\538654387\config.udb
    4 %Documents and Settings%\All Users\Application Data\538654387\init.udb
    5 %Documents and Settings%\All Users\Application Data\538654387\Languages
    6 %Documents and Settings%\All Users\Application Data\538654387\Languages\English.lng
    7 %Documents and Settings%\All Users\Application Data\538654387\Languages\German.lng
    8 %Documents and Settings%\All Users\Application Data\538654387\Languages\Spanish.lng
    9 %UserProfile%\Desktop\System Security.lnk
    10 %UserProfile%\Start Menu\Programs\System Security
    11 %UserProfile%\Start Menu\Programs\System Security\System Security.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "1632575944"

Additional Information on Scanbaseonline.com

  • The following domains were detected:
    # Domain
    1 Scanbaseonline.com
Loading...