Internetsafebrowsing.com Description

Internetsafebrowsing.com is a browser hijacker promoting the rogue anti-spyware application known as Personal Antivirus. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Internetsafebrowsing.com domain. Here the computer is subject to a fake online scan that displays fictitious and often grossly exaggerated infection results in order to intimidate the user into purchasing the fake spyware remover Personal Antivirus.

Type: Rogue Websites

How Can You Detect Internetsafebrowsing.com?

Internetsafebrowsing.com has typically the following processes in memory:

• %Program Files%\Personal Antivirus\PerAvir.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe

Internetsafebrowsing.com creates the following registry entries:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”

Important Article Disclaimer