Viewworldmy1.com Description

Viewworldmy1.com is a browser hijacker promoting the distribution of the rogue anti-spyware application known as WinPC Defender. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Viewworldmy1.com domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing the fake spyware remover WinPC Defender.

Type: Rogue Websites

How Can You Detect Viewworldmy1.com?

Viewworldmy1.com has typically the following processes in memory:

• %UserProfile%\Local Settings\Temp\delwdef2008.bat
• %Program Files%\WinPC Defender\FwHookDrv.sys
• %WINDOWS%\ieocx.dll
• %Program Files%\WinPC Defender\Uninstall_st_st_.exe
• %Program Files%\WinPC Defender\WDefDemo.exe
• %Program Files%\WinPC Defender\Uninstall.exe

Viewworldmy1.com creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “sysav”
• HKEY_CLASSES_ROOT\CLSID\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
• HKEY_CLASSES_ROOT\IEocxApp.IEocx.1
• HKEY_CURRENT_USER\Control Panel\don’t load “wscui.cpl”
• HKEY_CURRENT_USER\Software\WinPC Defender
• HKEY_CLASSES_ROOT\IEocxApp.IEocx
• HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
• HKEY_CURRENT_USER\Control Panel\don’t load “scui.cpl”
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Content”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
• HKEY_CLASSES_ROOT\Interface\{4B66E1DF-4DE3-4CDA-83B5-11673EADAB0B}

Important Article Disclaimer