May 03

Srv-scan.biz Description:

Srv-scan.biz is a counterfeit online scanner designed to pimp the notorious fake anti-spyware tool called System Protector, which is dangerous malware and should be treated as such. One usually follows Srv-scan.biz domain after getting diverted there through the malicious activity of trojan viruses on the compromised computer. These Vundo or Zlob trojans trespass on the target system via online exploits, security software flaws and firewall vulnerabilities on the compromised computer. When inside and active, these trojans change browser settings so that you will keep hitting Srv-scan.biz domain at random intervals. On Srv-scan.biz, you will see a pathetic imitation of an online scan performed by System Protector which claims to check your computer for viruses and other malware. This scanner is more like an animation that was designed in advance to mislead people into thinking their comptuers are contaminated with malware. After hitting Srv-scan.biz, you will be expected to install the full commercial version of System Protector which demands payment. Do not get tricked into downloading System Protector on Srv-scan.biz, otherwise you will simply waste your money and get your computer further infected. It’s strongly advised to remove Srv-scan.biz hijacker ASAP upon detection.

Find out if your PC is infected with Srv-scan.biz hijacker and affiliated malware:

Srv-scan.biz Fake Scanner screenshot:

Srv-scan.biz

How to remove Srv-scan.biz hijacker manually:

To perform manual removal of Srv-scan.biz hijacker and related rogue trialware, you should do the following:

Delete Srv-scan.biz hijacker corrupt files:

  • %UserProfile%\Application Data\install.exe
  • %UserProfile%\Application Data\lsascs.exe
  • %UserProfile%\Application Data\shellex.dll
  • %UserProfile%\Application Data\Microsoft\windll32.exe
  • %UserProfile%\Application Data\SpyProtectorSC_Base_new.dat
  • %UserProfile%\Application Data\SpyProtectorSC_Config.ini
  • %UserProfile%\Desktop\System Protector.lnk
  • %UserProfile%\Start Menu\Programs\System Protector\Purchase License.url
  • %UserProfile%\Start Menu\Programs\System Protector\Support Page.url
  • %UserProfile%\Start Menu\Programs\System Protector\System Protector.lnk
  • %Program Files%\System Protector
  • %WINDOWS%\system32\spyprotector.cpl

Remove Srv-scan.biz hijacker registry entries:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” => 1
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\System Protector
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\System Protector
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\System Protector
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\System Protector
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lsascs.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “System Protector”

Please, note that manual removal of Srv-scan.biz hijacker is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic Srv-scan.biz hijacker removal tool below:

Download Srv-scan.biz Hijacker Removal Tool

Leave a Reply