Home Rogue Websites Top-rate-scan8.com

Top-rate-scan8.com

Posted: December 28, 2009

Top-rate-scan8.com is a corrupt website which promotes the Antivir rogue anti-spyware program. Top-rate-scan8.com hijacks the browser and directs it to a page that displays a fake security scan. Top-rate-scan8.com resembles My Computer GUI and issues misleading warning messages which claim your PC is infected. Top-rate-scan8.com scanner produces fake scan results and then recommends you to remove the 'infections' using Antivir software. Do not follow any links or instructions produced by Top-rate-scan8.com, instead remove this threat with effective anti-spyware tools immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Start Menu\AV
    2 %Documents and Settings%\All Users\Start Menu\AV\Antivir.lnk
    3 %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk
    4 %Program Files%\AV
    5 Antivir.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\EVAACDHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
Loading...