System Adware Scanner 2010

19 December 2009 Rogue 0 Comment

System Adware Scanner 2010 is a fake antivirus program and the latest variant of the Windows Smart Security. Pretending to be a virus scanner, System Adware Scanner 2010 can easily deceive computer users to purchase the licensed version of the program. Among other technique it does to further mislead users is to redirect Internet browser to fake security web sites promoting System Adware Scanner 2010 as legitimate application. The malware may also disguise as a needed media coder/decoder that is required to view online video hosted on scam web sites.

If System Adware Scanner 2010 file is executed, it installs itself on target PC and modifies the registry to ensure that it runs when Windows starts. Next, it tries to scare victims by posting excessive alert messages declaring a number of identified viruses and Trojans. You need not to worry on this falsified detection. Projected results on System Adware Scanner 2010 scan are fictitious to make you panic and get convince easily to pay for the registered version.

The real threat that keeps on disturbing the PC is System Adware Scanner 2010 itself. This malware intends to keep the computer unusable until you pay for registration key.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Characteristics (Analysis)
System Adware Scanner 2010 is a fake security application. It differs a lot from Trojans and viruses. Rogue security application’s main objective is to be profitable software. Selling itself by means of misleading strategies is System Adware Scanner 2010’s strong point. Unlike Trojans and viruses, this malware do not infect other machines connected on the same network. It merely spreads over the Internet through Trojan infection.

Added Registry Entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "(random numbers)"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "(random numbers)" 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemAdwareScanner2010
HKEY_LOCAL_MACHINE\SOFTWARE\(random numbers)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\noterminate

Associated Files and Folders:

C:\WINDOWS\system32\drivers\(random numbers).sys 
C:\Documents and Settings\All Users\Application Data\(random numbers)
C:\Documents and Settings\All Users\Application Data\(random numbers)\(random numbers)
C:\Documents and Settings\All Users\Application Data\(random numbers)\(random numbers).exe
C:\Documents and Settings\All Users\Application Data\(random numbers)\(random numbers).i
%UserProfile%\Desktop\System Adware Scanner 2010.lnk
%UserProfile%\Start Menu\Programs\System Adware Scanner
%UserProfile%\Start Menu\Programs\System Adware Scanner\System Adware Scanner 2010.lnk

1. Temporarily Disable System Restore (Windows Me/XP). [how to]
2. Open your antivirus application and update the virus definition file. This method ensures that your antivirus program can detect even newer variants of System Adware Scanner 2010

3. Start Windows in Safe Mode with Networking.
- From a power-off state, turn on the computer and press F8 on your keyboard repeatedly.
- Your computer will display Windows Advanced Boot Options menu. Please select Safe Mode with Networking.
- The system will now boot Windows and loads only necessary drivers and files.

4. Open your antivirus program and run a full system scan. After the scan, delete all infected items. If unable, better place them in quarantine. Once the scan is complete, please proceed with the next step.

Online Virus Scanner:

Another way to remove System Adware Scanner 2010 without the need to install additional antivirus application is to perform a thorough scan with free online virus scanner that can be found here or on websites of legitimate anti-virus and security provider.

5. Go to Online Virus Scanner list and run a virus scan. This may require plug-ins, add-on or Activex object, please install if you want to proceed with scan.
6. After completing the necessary download, your system is now ready for online virus scanning.
7. Select an option in which you can thoroughly scan the computer to make sure that it will find and delete entirely all infections not detected on previous scan.
8. Remove or delete all detected items.
9. When scanning is finished you may now restart the computer in normal mode.

Automatic Removal of System Adware Scanner 2010

In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.