I-Worm.Trojan.b Description

I-Worm.Trojan.b is a fake infection displayed on a Windows Security Center pop-up, exploited by the rogue anti-spyware application called System Security 2009 in order to get people to purchase this malicious software. Typically, the pop-up is displayed on a webpage you are redirected to due to a hijacker modifying your browser settings, causing unwanted diverts to malicious domains. It is on such insecure websites that you may receive this misleading alert message, which reads:

“Windows Security Center – Virus (I-Worm.Trojan.b) was found on your computer! Click OK to install System Security Antivirus.”

You are then prompted to download and install System Security 2009, which will be executed and run each and every time your computer starts up. This will lead to further fake notifications flooding your system, along with fraudulent infection reports, all in order to scare you into purchasing and installing the full version of System Security 2009.

Type: Fake Warning Messages

How Can You Detect I-Worm.Trojan.b?

I-Worm.Trojan.b has typically the following processes in memory:

• %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe

I-Worm.Trojan.b creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “00308937″
• HKEY_LOCAL_MACHINE\Software\00308937

Important Article Disclaimer