Buy-IS2010.com
Buy-IS2010.com is a malicious website that conducts bogus system scans on victims' computers once they land on it. Buy-IS2010.com is placed into victims' Hosts files by Trojans that can surreptitiously enter systems. On visiting Buy-IS2010.com a victim will be presented with an online system scan that will automatically report that the system is infected with dangerous computer parasites. The user will then be prompted to purchase the rogueware Internet Security 2010. Users should ignore all scan reports, security alerts and recommendations made on Buy-IS2010.com; they are all fabricated.
File System Details
Buy-IS2010.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\winhelper86.dll | |
| 2. | %WINDOWS%\system32\smss32.exe | |
| 3. | %WINDOWS%\system32\winupdate86.exe | |
| 4. | %Program Files%\InternetSecurity2010\IS2010.exe | |
| 5. | %WINDOWS%\system32\winlogon86.exe | |
| 6. | %UserProfile%\Desktop\Internet Security 2010.lnk | |
| 7. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk | |
| 8. | %Program Files%\InternetSecurity2010 | |
| 9. | %UserProfile%\Start Menu\Internet Security 2010.lnk |
Registry Details
Buy-IS2010.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winupdate86.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Security 2010
HKEY_CURRENT_USER\Software\IS2010
