Fake Scanner Sites
Google Search Redirects
Alias: Site Villain, SiteVillain
Description: Site Villain is another rogue anti-spyware application which may be secretly installed by a trojan or manually downloaded from one of many fraudulent Fake Scanner Sites sites. Once installed, Site Villain pretends to perform a system scan then displays exaggerated fake results similar to the one shown below:
Site Villain can hijack Internet Explorer and prevent the user from visiting certain websites and display a warning page instead. A recent tactic used is to have a trojan display fake Windows Security Center popup that recommends installing Site Villain as shown below:
Hijacker - A Hijacker is a software application that takes control of your browser's settings. Usually it changes your home page and redirects it to some unknown site or modifies your search settings. It prevents you from changing back your browser's settings. An infected browser usually operates much slower.
Ransomware - Ransomware is a software application that infects a computer and asks for money to have the infection removed.
Trojan - A Trojans or Trojan Horse is any programs that installs itself secretly normally via malware programs, quite often with sinister intent. Once installed, the trojan author (hacker) can gain complete control of the infected PC. Trojans are usually designed to steal sensitive information and/or destroy the system. Trojans can be distributed as unsolicited email attachments, or bundled with freeware and shareware programs.
Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer and / or to protect your privacy.
SpyNoMore removes Site Villain: Yes
Threat risk: High Risk
Very dangerous malware. Can log user's keyboard activity and take snapshots of the user's screen. Uses stealth installation and removal is very difficult. Category includes spyware programs, adware programs and trojans.
Spyware Alert balloon messages appear on your Windows Tray.
Site Villain is installed without your consent.
Pop-up messages claiming that your computer is infected, recommending Site Villain.
A fake Windows Security Center recommending Site Villain is displayed.
Site Villain can create 100's of fake files in Windows and System directories, but these for the most part are pretty harmless, they are only there to scare the user into buying the full version of the program.
A fake Windows Security Center message popups up upon restarting your computer.
Running Process Signatures:
Registered Dll (Dynamic Link Library) Signatures:
SpyNoMore Collected Residual File Signatures: