Threat Database Rogue Websites Se-2011-payment.com

Se-2011-payment.com

Se-2011-payment.com is a misleading website that advertises and distributes the rogue called Security Essentials 2011. Se-2011-payment.com is the payment page for Security Essentials 2011 and victims are redirected to this website when they click on the fake security alerts displayed by the rogue. Avoid purchasing or clicking on anything on Se-2011-payment.com as you may unknowingly download malware onto your system. Additionally do not waste your money on the useless Security Essentials 2011 rogue.

File System Details

Se-2011-payment.com may create the following file(s):
# File Name Detections
1. %Temp%\[random_letters].dll
2. %Temp%\[random_letters].exe
3. %Documents and Settings%\[User_Name]\Application Data\Security Essentials 2011\SE2010.exe
4. %Documents and Settings%\[User_Name]\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Essentials 2011.LNK
5. %Documents and Settings%\[User_Name]\Application Data\Security Essentials 2011\[random_letters]\[random_letters].cfg
6. %Documents and Settings%\[User_Name]\Start Menu\Security Essentials 2011.LNK
7. %Documents and Settings%\[User_Name]\Application Data\Security Essentials 2011\[random_letters]\
8. %Documents and Settings%\[User_Name]\Desktop\Security Essentials 2011.LNK
9. %Documents and Settings%\[User_Name]\Application Data\Security Essentials 2011\

Registry Details

Se-2011-payment.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\updatesst
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify
HKEY_CURRENT_USER\SOFTWARE\SE2010
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify

Trending

Most Viewed

Loading...