Mar 10

Threat Description:

Browsersecurecheck.com is a browser hijack originator providing online promotion to the new nasty rogue spyware remover called Antivirus 7. Browsersecurecheck.com is visited in only one case: if your system gets hijacked by a trojan horse. The trojan virus could have infiltrated your PC unnoticeably and has done some browser functioning distortion job. So, with this threat on your workstation, you won’t be able to visit sites because each time you try to you’ll end up on Browsersecurecheck.com/block.php page which reads “Warning! Visiting this site may harm your computer!”. There are two options provided there (please see below): Continue Unprotected and Get security software, the former being inactive. So as you must have figured by now, the only option is the latter one. If you click it though, you will get rerouted to one of the 2 possible payment pages supporting Antivirus 7 scam. Each of them will recommend you to become the ‘happy owner’ of Antivirus 7 software and even provide a discount of $33.30. Well, a discount for purchasing rogue anti-spyware sounds like cold comfort, doesn’t it? Under no circumstances should you pay for Antivirus 7 on Browsersecurecheck.com or else you will end up ripped off. On the other hand, simply navigating away from Browsersecurecheck.com will turn out to be only a temporary relief. It will keep coming back because the trojans are still there. So what you should do to prevent Browsersecurecheck.com from popping up is check your system for malware and get it all swept away.

Determine if your system is infected with Browsersecurecheck.com hijacker and related threats:

Browsersecurecheck.com/block.php Screenshot:

Browsersecurecheck.com/block.php

Browsersecurecheck.com/1/ Screenshot

Browsersecurecheck.com/1/

Browsersecurecheck.com/2/ Screenshot

Browsersecurecheck.com/2/

How to remove this threat manually:

Browsersecurecheck.com manual uninstall procedure:

Get rid of the related corrupt files:

  • %Documents and Settings%\All Users\Start Menu\AV
  • %Documents and Settings%\All Users\Start Menu\AV\Antivirus7.lnk
  • %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk
  • %Documents and Settings%\[UserName]\Desktop\Antivirus7.lnk
  • %Program Files%\AV
  • %Program Files%\AV\Antivirus7.exe
  • %Program Files%\Common Files\Uninstall
  • %Program Files%\Common Files\Uninstall\AV
  • %Program Files%\Common Files\Uninstall\AV\Uninstall.lnk
  • %Program Files%\Antivirus7AV
  • %Program Files%\Antivirus7AV\Antivirus7.exe
  • %Program Files%\Antivirus7AV\unins000.dat
  • %Program Files%\Antivirus7AV\unins000.exe
  • %WINDOWS%\system32\UpdateCheck.dll

Delete the associated registry entries:

  • HKEY_CURRENT_USER\Software\EVAACD
  • HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus 7″
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform “WinNT-EVI 25.11.2009″
  • HKEY_CURRENT_USER\Software\FNULL246
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1

Please note that Browsersecurecheck.com manual removal is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may cause irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download Browsersecurecheck.com Removal Tool

Leave a Reply