Home Rogue Websites Secureserver4.cc

Secureserver4.cc

Posted: April 13, 2009

Secureserver4.cc is a website that is designed to promote and potentially install the rogue anti-spyware program System Security 2009. Secureserver4.cc could hijack your web browser redirecting you to a page that looks as if it is scanning your computer for parasites. The parasites scan is bogus and should never be trusted. Secureserver4.cc and any infection that it downloads should be detected and removed with a good anti-spyware program to prevent damages to your system.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\00308937\00308937.exe
    2 %Documents and Settings%\All Users\Application Data\00308937\config.udb
    3 %Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
    4 %UserProfile%\Desktop\System Security 2009.lnk
    5 %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk
    6 %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\00308937HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "00308937"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SystemSecurity2009
Loading...