Home Rogue Websites Scan.stopandscanyourpc.com

Scan.stopandscanyourpc.com

Posted: October 15, 2009

Scan.stopandscanyourpc.com is a malicious web site that was created by hackers to promote Smart Protector which is a rogue anti-spyware program. Once visited, Scan.stopandscanyourpc.com will appear to scan your computer only to return bogus results. Each instance of Scan.stopandscanyourpc.com was created to push you into purchasing the full Smart Protector application. Computer users should not fall for the devious tricks carries out by Scan.stopandscanyourpc.com.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\Microsoft\Media Index\Drivers
    2 %Documents and Settings%\All Users\Application Data\Microsoft\Media Index\internet.dll
    3 %Program Files%\Smart Protector\config.cnf
    4 %Program Files%\Smart Protector\mainbase.adb
    5 %Program Files%\Smart Protector\q.adb
    6 %Program Files%\Smart Protector\quarantine
    7 %Program Files%\Smart Protector\queue.vdb
    8 %Program Files%\Smart Protector\smartprotector.exe
    9 %Program Files%\Smart Protector\uninstall.exe
    10 %Program Files%\Smart Protector\virusbase.adb
    11 %UserProfile%\Desktop\Smart Protector.lnk
    12 %UserProfile%\Start Menu\Programs\Smart Protector
    13 %UserProfile%\Start Menu\Programs\Smart Protector\Smart Protector.lnk
    14 %UserProfile%\Start Menu\Programs\Smart Protector\Uninstall.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\InternetHKEY_LOCAL_MACHINE\SOFTWARE\Smart ProtectorHKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\SHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Smart Protector"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Smart Protector
Loading...