Home Malware Programs Browser Hijackers Total-scan.com

Total-scan.com

Posted: February 26, 2010

Total-scan.com is a browser hijacker that displays a fake scan and reports false threats. These scare tactics are to convince you that your computer is infected with malicious software. Total-scan.com impersonates the Windows "My Computer" platform to make it seem as if it's actually scanning your PC. Total-scan.com promotes the rogue antivirus program Security Tool. This rogue displays fake warnings and and urges owners of compromised PCs to pay for a full version of the program to remove the supposed infections. Use a reliable antivirus program to remove Total-scan.com and all threats associated to Security Tool.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Application Data\[random digits]
    2 %UserProfile%\Application Data\[random digits]\[random digits].bat
    3 %UserProfile%\Application Data\[random digits]\[random digits].cfg
    4 %UserProfile%\Application Data\[random digits]\[random digits].exe
    5 %UserProfile%\Desktop\Security Tool.lnk
    6 %UserProfile%\Start Menu\Programs\Security Tool.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Security ToolHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random digits].exe"
Loading...