Archive for 30 October 2009

PC Security 2009 Removal

0

PC Security 2009 is a new/updated rogue. We have updated our definitions to detect and remove all traces of this rogue.

PC Security 2009 Application
Rogue - PC Security Main Screen

Rogue - PC Security Main Screen

Files/Folders Created
%CSIDL_PROGRAMS%\PC_SECURITY2009
%CSIDL_PROGRAMS%\PC_SECURITY2009\PC_SECURITY2009.LNK
%CSIDL_PROGRAMS%\PC_SECURITY2009\UNINSTALL.LNK
%PROGRAMFILES%\PC_SECURITY2009
%PROGRAMFILES%\PC_SECURITY2009\AVENGN.DLL
%PROGRAMFILES%\PC_SECURITY2009\HTMLAYOUT.DLL
%PROGRAMFILES%\PC_SECURITY2009\PC_SECURITY2009.CFG
%PROGRAMFILES%\PC_SECURITY2009\PC_SECURITY2009.EXE
%PROGRAMFILES%\PC_SECURITY2009\PTHREADVC2.DLL
%PROGRAMFILES%\PC_SECURITY2009\UNINSTALL.EXE
%PROGRAMFILES%\PC_SECURITY2009\WSCUI.CPL
%PROGRAMFILES%\PC_SECURITY2009\DATA
%PROGRAMFILES%\PC_SECURITY2009\DATA\DAILY.CVD
%PROGRAMFILES%\PC_SECURITY2009\MICROSOFT.VC80.CRT
%PROGRAMFILES%\PC_SECURITY2009\MICROSOFT.VC80.CRT\MICROSOFT.VC80.CRT.MANIFEST
%PROGRAMFILES%\PC_SECURITY2009\MICROSOFT.VC80.CRT\MSVCM80.DLL
%PROGRAMFILES%\PC_SECURITY2009\MICROSOFT.VC80.CRT\MSVCP80.DLL
%PROGRAMFILES%\PC_SECURITY2009\MICROSOFT.VC80.CRT\MSVCR80.DLL

Registry Items Created/Added
HKLM\SOFTWARE\PC_Security2009
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run#PC Security 2009 = “C:\Program Files\PC_Security2009\PC_Security2009.exe” /hide
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC_Security2009
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC_Security2009#DisplayName = PC Security 2009
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC_Security2009#UninstallString = C:\Program Files\PC_Security2009\Uninstall.exe

Click here to download SUPERAntiSpyware to Remove PC Security 2009

Fake Videos : Michael Bisping Post Fight Interview

0

I had a friend call me last night to tell me that his computer was infected after he did “nothing” – typical :) After a little investigation I found out that he was searching for a post fight interview from UFC 100 for a fighter named “Michael Bisping” who was knocked out by Dan “Hendo” Henderson. He found a nice link on Google that led to the following series of events (don’t try this at home!):

Video site indicating they have the video….

Now just click to watch the video…..

SUPERAntiSpyware Scan after attempting to watch video….

As you can see these links are floating around Google, Yahoo and MSN. Remember, think before you click!

If you have come across these types of situations, it’s a good idea to scan with SUPERAntiSpyware to make sure your system is clean!

Go to Top