WinBlueSoft.com

By Domesticus in Rogue Websites | 5 views
Rate it:
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
More... More

WinBlueSoft.com Description

WinBlueSoft.com is a browser hijacker promoting the rogue anti-spyware application known as WinBlueSoft. Due to affiliated Trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the WinBlueSoft.com domain. Here the computer is subject to a fake online scan that reports fictitious and sometimes grossly exaggerated infection results, all in order to scare the user into purchasing the fake spyware remover WinBlueSoft.

Type: Rogue Websites

How Can You Detect Malware?

Download SpyHunter’s Detection Scanner
to detect malware related to WinBlueSoft.com.

Malware related to WinBlueSoft.com Removal Details

It typically has the following processes in memory:

  • %Program Files%\WinBlueSoft Software\WinBlueSoft\WinBlueSoft.exe
  • %Program Files%\WinBlueSoft Software\WinBlueSoft\uninstall.exe
  • %Windows%\System32\blocker.dll

It creates the following files in the system:

  • %Program Files%\WinBlueSoft Software\WinBlueSoft\data.bin
  • %Documents and Settings%\All Users\Start Menu\Programs\WinBlueSoft
  • %Documents and Settings%\All Users\Start Menu\Programs\WinBlueSoft\3 Uninstall.lnk
  • %Program Files%\WinBlueSoft Software\WinBlueSoft
  • %Documents and Settings%\All Users\Desktop\WinBlueSoft.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\WinBlueSoft\2 Homepage.lnk
  • %Program Files%\WinBlueSoft Software
  • %Program Files%\WinBlueSoft Software\WinBlueSoft\license.txt
  • %Documents and Settings%\All Users\Start Menu\Programs\WinBlueSoft\1 WinBlueSoft.lnk

It creates the following registry entries:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinBlueSoft
  • HKEY_LOCAL_MACHINE\SOFTWARE\WinBlueSoft
  • HKEY_CURRENT_USER\Software\WinBlueSoft
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “WinBlueSoft”

Important Article Disclaimer

ESG Support Center

This entry was last updated on 08/20/12 and posted on 06/5/09. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Comment

Note: Abusive comments are not allowed. Please do not post comments regarding technical support issues. ESG customers that have issues with SpyHunter should open a customer support ticket.

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word

Home | SpyHunter Risk Assessment Model | Privacy Policy | End User License Agreement | Additional Terms and Conditions
Copyright 2003-2012. Enigma Software Group USA, LLC. All Rights Reserved.