Home Rogue Websites Scan.clearedpcsecurity.com

Scan.clearedpcsecurity.com

Posted: October 15, 2009

Scan.clearedpcsecurity.com is a devious website that was created to sell and promote the fake security application Smart Protector. Scan.clearedpcsecurity.com can be very misleading in the way that it claims Smart Protector can rid your system of parasites. Scan.clearedpcsecurity.com will pretend to scan your computer for parasites only to return falsified results. Scan.clearedpcsecurity.com is not a trusted web page and should never be visited under any conditions.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\Microsoft\Media Index\Drivers
    2 %Documents and Settings%\All Users\Application Data\Microsoft\Media Index\internet.dll
    3 %Program Files%\Smart Protector\config.cnf
    4 %Program Files%\Smart Protector\mainbase.adb
    5 %Program Files%\Smart Protector\q.adb
    6 %Program Files%\Smart Protector\quarantine
    7 %Program Files%\Smart Protector\queue.vdb
    8 %Program Files%\Smart Protector\smartprotector.exe
    9 %Program Files%\Smart Protector\uninstall.exe
    10 %Program Files%\Smart Protector\virusbase.adb
    11 %UserProfile%\Desktop\Smart Protector.lnk
    12 %UserProfile%\Start Menu\Programs\Smart Protector
    13 %UserProfile%\Start Menu\Programs\Smart Protector\Smart Protector

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\InternetHKEY_LOCAL_MACHINE\SOFTWARE\Smart ProtectorHKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\SHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Smart Protector"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Smart Protector
Loading...