Home Malware Programs Browser Hijackers Scannerpc2012.org

Scannerpc2012.org

Posted: January 26, 2010

Scannerpc2012.org is a malicious Browser Hijacker designed to promote the rogue anti-spyware program Internet Security 2010 and other rogue software programs. If you are redirected to Scannerpc2012.org, do not click on anything on the web page as it may result in malware infections. Use a proven malware removal program to detect and remove any threats that may have infected your PC via Scannerpc2012.org.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
    2 %Documents and Settings%\[USER]\Cookies\user@buy[1].txt
    3 %Documents and Settings%\[USER]\Desktop\Internet Security 2010.lnk
    4 %Documents and Settings%\[USER]\Desktop\SetupIS2010.exe
    5 %Documents and Settings%\[USER]\Start Menu\Internet Security 2010.lnk
    6 %Program Files%\InternetSecurity2010
    7 %Program Files%\InternetSecurity2010\IS2010.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Internet Security 2010HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "IS2010.exe"HKEY_LOCAL_MACHINE\SOFTWARE\Internet Security 2010
Loading...