Winpc-antivirus2009.com
Winpc-antivirus2009.com is a browser hijacker sponsoring the fake spyware remover called WinPC Antivirus. To achieve this goal, affiliated trojans infiltrate your system and alter the browser settings, causing web-surfing activities to be continuously interrupted and diverted to the Winpc-antivirus2009.com homepage. Here you are greeted with aggressive advertising, an attractive layout and a free, albeit fake, online scanner that reports only fictitious or exaggerated infection results as a way of scaring you into purchasing the WinPC Antivirus fake software.
File System Modifications
- The following files were created in the system:
# File Name 1 %UserProfile%\Application Data\winav.exe 2 %UserProfile%\Desktop\WinPC Antivirus.lnk 3 %UserProfile%\Start Menu\WinPC Antivirus.lnk
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "sysav"HKEY_CURRENT_USER\Software\WinPC AntivirusHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusDisableNotify" = 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallDisableNotify" = 1HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "UpdatesDisableNotify" = 1HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USER\Control Panel\don't load "scui.cpl"HKEY_CURRENT_USER\Control Panel\don't load "wscui.cpl"
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.