FANDOM



Hoax.Win32.SysCare.p or SysCare is a hoax malware that runs on Microsoft Windows.

Payload

SysCare creates the following files on an infected computer:

  • %System%\spywarewarning.mht
  • %System%\spywarewarning2.mht

It creates unique identifiers to flag its presence in the system

  • spy_monitor_1098

It uses the masks shown below to search for files on the victim machine:

  • All Extension Format (*.*)

It runs the following files (commands):

  • %System%\adsldpcm.exe
Community content is available under CC-BY-SA unless otherwise noted.