WinBlueSoft.com Description

WinBlueSoft.com is a browser hijacker promoting the rogue anti-spyware application known as WinBlueSoft. Due to affiliated Trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the WinBlueSoft.com domain. Here the computer is subject to a fake online scan that reports fictitious and sometimes grossly exaggerated infection results, all in order to scare the user into purchasing the fake spyware remover WinBlueSoft.

Type: Rogue Websites

Automatic Detection of WinBlueSoft.com

WinBlueSoft.com has typically the following processes in memory:

• %Program Files%\WinBlueSoft Software\WinBlueSoft\WinBlueSoft.exe
• %Program Files%\WinBlueSoft Software\WinBlueSoft\uninstall.exe
• %Windows%\System32\blocker.dll

WinBlueSoft.com creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinBlueSoft
• HKEY_LOCAL_MACHINE\SOFTWARE\WinBlueSoft
• HKEY_CURRENT_USER\Software\WinBlueSoft
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “WinBlueSoft”

Important Article Disclaimer