Defendersiteblock.com
Defendersiteblock.com is a browser hijacker that is involved in the distribution of the rogue security program Cyber Security. Defendersiteblock.com displays a warning page that notifies a user of malignant internet activity. The user will then be directed to purchase Cyber Security in order to continue browsing safely. All warnings and software advertised on Defendersiteblock.com are malicious and not to be trusted.
File System Details
Defendersiteblock.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\iehelpmod.dll | |
| 2. | %Program Files%\CS\tsc.exe | |
| 3. | %Documents and Settings%\All Users\Start Menu\CS\Cyber Security.lnk | |
| 4. | %Documents and Settings%\All Users\Start Menu\CS\Security Center.lnk | |
| 5. | %AppData%\Microsoft\Internet Explorer\Quick Launch\CS.lnk | |
| 6. | %Program Files%\Common Files\CSUninstall\Uninstall.lnk | |
| 7. | %Documents and Settings%\All Users\Start Menu\CS\Computer Scan.lnk | |
| 8. | %Documents and Settings%\All Users\Start Menu\CS\Registration.lnk | |
| 9. | %Documents and Settings%\All Users\Start Menu\CS\Update.lnk | |
| 10. | %Program Files%\Common Files\CSUninstall | |
| 11. | %Documents and Settings%\All Users\Start Menu\CS | |
| 12. | %Documents and Settings%\All Users\Start Menu\CS\Help.lnk | |
| 13. | %Documents and Settings%\All Users\Start Menu\CS\Settings.lnk | |
| 14. | %UserProfile%\Desktop\Cyber Security.lnk | |
| 15. | %Program Files%\CS |
Registry Details
Defendersiteblock.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "CS"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\CS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
