Threat Database Trojans FakeAlert-IS2010.dldr

FakeAlert-IS2010.dldr

FakeAlert-IS2010.dldr is a Trojan that can secretly enter computer systems via spam e-mails, malicious websites or file-sharing networks. On execution, FakeAlert-IS2010.dldr will drop potentially unwanted programs onto a system causing the system's performance to deteriorate. FakeAlert-IS2010.dldr may also launch fake security alerts and promote the purchase of rogueware. FakeAlert-IS2010.dldr should be exterminated upon detection.

File System Details

FakeAlert-IS2010.dldr may create the following file(s):
# File Name Detections
1. %WinDir%\system32\helper32.dll
2. %WinDir%\system32\winlogon32.exe
3. %WinDir%\system32\smss32.exe
4. %WinDir%\system32\IS15.exe
5. %WinDir%\system32\warning.html

Registry Details

FakeAlert-IS2010.dldr may create the following registry entry or registry entries:
[HKEY_USERS\S-1-(varies)\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\is-soft-download.com]
[HKEY_USERS\S-1-(varies)\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-internet-security10.com]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-internet-security10.com]
[HKEY_USERS\S-1-(varies)\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\is-software-download25.com]

Trending

Most Viewed

Loading...