Home Malware Programs Browser Hijackers 1-buy-internet-security-2010.com

1-buy-internet-security-2010.com

Posted: January 27, 2010

1-buy-internet-security-2010.com is a Browser Hijacker designed to promote the Internet Security 2010 rogue anti-spyware. Internet users often get redirected to 1-buy-internet-security-2010.com after Trojans infect their machines. 1-buy-internet-security-2010.com will use various tactics to claim that the system has become infected and warns that the only way to get rid of the parasites is by purchasing Internet Security 2010. Do not become another victim of cybercrime. Ignore Downloadavr50.com's warnings and delete the URL from the browser. Then use an effective anti-spyware kit to remove all threats associated with Internet Security 2010.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
    2 %Documents and Settings%\[USER]\Cookies\user@buy[1].txt
    3 %Documents and Settings%\[USER]\Desktop\Internet Security 2010.lnk
    4 %Documents and Settings%\[USER]\Desktop\SetupIS2010.exe
    5 %Documents and Settings%\[USER]\Start Menu\Internet Security 2010.lnk
    6 %Program Files%\InternetSecurity2010
    7 %Program Files%\InternetSecurity2010\IS2010.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Internet Security 2010HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "IS2010.exe"HKEY_LOCAL_MACHINE\SOFTWARE\Internet Security 2010

One Comment

Loading...