Home Malware Programs Rogue Anti-Spyware Programs Threat Nuker

Threat Nuker

Posted: January 6, 2011

Threat Nuker is a rogue malware remover that uses scare tactics to get unwary computer users to purchase the full version of this corrupt program. Threat Nuker is downloaded and installed through the Zlob Trojan infection which is found on fake video codecs used to view porn videos. Threat Nuker may affect your system files and may even have rootkit functionality which gives it the ability to hide malicious files in the system. ThreatNuker may hijack browsers, display pop up ads and disable key system functions.

Threat Nuker, if installed, runs a scan on your computer and alleges to detect spyware on your computer. After the scan is complete, Threat Nuker will display false postives and pop ups consisting of fake warning messages with the option to remove the detected spyware. Computer users are urged to avoid downloading or purchasing Threat Nuker no matter how legitimate the program may look. Threat Nuker may recreate itself after reboot, continue to run in the background of your system without your knowledge and display fake warning messages to drive you to purchase the full version of ThreatNuker. Threat Nuker can also generate a system slowdown and will eventually cause the computer to malfunction.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%%UserProfile%Application DataThreat Nuker
    2 %UserProfile%%UserProfile%Application DataThreat NukerAutorun.ico
    3 %UserProfile%%UserProfile%Application DataThreat NukerProcess.ico
    4 %UserProfile%%UserProfile%Application DataThreat NukerService.ico
    5 %UserProfile%%UserProfile%Application DataThreat Nukersettings.ini
    6 %UserProfile%%UserProfile%Application DataThreat Nukeruill.ini

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}%UserProfile%HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet Settings5.0User AgentPost Platform "URVDoc"HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "Threat Nuker"HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallThreat Nuker_is1

Related Posts

Loading...