Home Malware Programs Misleading Programs Win Scanner

Win Scanner

Posted: December 23, 2010

Win Scanner is a fake system optimizer and is a scam designed to fleece consumers out of their money. It only emulates the workings of a real system optimizer, but in reality is unable to live up to any of its promises.

Following suit to other well known rogues such as Check Disk, Ultra Defragger and HDD Defragmenter, Win Scanner is another malicious evolution in the way cyber criminals go about fooling honest consumers into parting with their money for no good cause.

Making use of traditional means to distribute its virus, the Win Scanner virus is spread via Trojan and malware infections bundled into bogus downloads. Once Win Scanner successfully infiltrates its victim's PC, it will inform the user his system is not performing optimally and will provide various error reports and warnings. Win Scanner will inform the user that the only way to fix these errors will be to pay for a licensed version. This is blatant blackmail and for this reason, among many others the user needs to stop Win Scanner permanently by having it deleted

The only way to successfully get rid of Win Scanner is by making use of a powerful security tool which is able to eliminate Win Scanner off the system for good. Continuously invest in up to the minute security software to protect your system against Win Scanner and future similar threats.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Desktop%\Win Scanner.lnk
    2 %Programs%\Win Scanner
    3 %Programs%\Win Scanner\Uninstall Win Scanner.lnk
    4 %Programs%\Win Scanner\Win Scanner.lnk
    5 %TempDir%\[random]
    6 %TempDir%\[random].dll
    7 %TempDir%\[random].exe
    8 %TempDir%\dfrg
    9 %TempDir%\dfrgr
    10 %TempDir%\Windows Update.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKCU\Software\Microsoft\Windows\CurrentVersion\Run "[random]"HKCU\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"

Related Posts

Loading...