Threat Database Browser Hijackers 1-buy-internet-security-2010.com

1-buy-internet-security-2010.com

1-buy-internet-security-2010.com hijacks victims' browsers by changing certain browser settings. This will frequently redirect victims' browsers to the 1-buy-internet-security-2010.com website, where the rogueware Internet Security 2010 is promoted. Once a victim visits 1-buy-internet-security-2010.com he/she will be bombarded with pop-ups, virus alerts and fake online system scans claiming that the machine is severely infected with malware which can only be removed with the "licensed version" of Internet Security 2010. 1-buy-internet-security-2010.com should not be trusted and by no means should Internet Security 2010 be purchased.

File System Details

1-buy-internet-security-2010.com may create the following file(s):
# File Name Detections
1. %Documents and Settings%\[USER]\Desktop\SetupIS2010.exe
2. %Program Files%\InternetSecurity2010\IS2010.exe
3. %Documents and Settings%\[USER]\Desktop\Internet Security 2010.lnk
4. %Documents and Settings%\[USER]\Cookies\user@buy[1].txt
5. %Documents and Settings%\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
6. %Program Files%\InternetSecurity2010
7. %Documents and Settings%\[USER]\Start Menu\Internet Security 2010.lnk

Registry Details

1-buy-internet-security-2010.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "IS2010.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Internet Security 2010
HKEY_CURRENT_USER\Software\Internet Security 2010

Trending

Most Viewed

Loading...