WinBlueSoft.com

By Domesticus in Rogue Websites

WinBlueSoft.com is a browser hijacker promoting the rogue anti-spyware application known as WinBlueSoft. Due to affiliated Trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the WinBlueSoft.com domain. Here the computer is subject to a fake online scan that reports fictitious and sometimes grossly exaggerated infection results, all in order to scare the user into purchasing the fake spyware remover WinBlueSoft.

File System Details

WinBlueSoft.com may create the following file(s):
# File Name Detections
1. %Program Files%\WinBlueSoft Software\WinBlueSoft\WinBlueSoft.exe
2. %Program Files%\WinBlueSoft Software\WinBlueSoft\uninstall.exe
3. %Windows%\System32\blocker.dll
4. %Program Files%\WinBlueSoft Software\WinBlueSoft\data.bin
5. %Documents and Settings%\All Users\Start Menu\Programs\WinBlueSoft
6. %Documents and Settings%\All Users\Start Menu\Programs\WinBlueSoft\3 Uninstall.lnk
7. %Program Files%\WinBlueSoft Software\WinBlueSoft
8. %Documents and Settings%\All Users\Desktop\WinBlueSoft.lnk
9. %Documents and Settings%\All Users\Start Menu\Programs\WinBlueSoft\2 Homepage.lnk
10. %Program Files%\WinBlueSoft Software
11. %Program Files%\WinBlueSoft Software\WinBlueSoft\license.txt
12. %Documents and Settings%\All Users\Start Menu\Programs\WinBlueSoft\1 WinBlueSoft.lnk

Registry Details

WinBlueSoft.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\WinBlueSoft
HKEY_CURRENT_USER\Software\WinBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinBlueSoft"

Trending

Most Viewed

Loading...