Buy-IS2010.com Description

Buy-IS2010.com is a malicious website that conducts bogus system scans on victims’ computers once they land on it. Buy-IS2010.com is placed into victims’ Hosts files by Trojans that can surreptitiously enter systems. On visiting Buy-IS2010.com a victim will be presented with an online system scan that will automatically report that the system is infected with dangerous computer parasites. The user will then be prompted to purchase the rogueware Internet Security 2010. Users should ignore all scan reports, security alerts and recommendations made on Buy-IS2010.com; they are all fabricated.

Type: Browser Hijackers

How Can You Detect Buy-IS2010.com?

Buy-IS2010.com has typically the following processes in memory:

• %WINDOWS%\system32\winhelper86.dll
• %WINDOWS%\system32\smss32.exe
• %WINDOWS%\system32\winupdate86.exe
• %Program Files%\InternetSecurity2010\IS2010.exe
• %WINDOWS%\system32\winlogon86.exe

Buy-IS2010.com creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “winupdate86.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Internet Security 2010
• HKEY_CURRENT_USER\Software\IS2010

Important Article Disclaimer