Threat Database Rogue Websites Winsecure2009.com

Winsecure2009.com

Winsecure2009.com is a misleading webpage that uses a Trojan to spread as it infects unsuspecting users' systems. Winsecure2009.com, also known as Winsecure2009.microsoft.com, is not in any way connected to the legitimate Microsoft. Winsecure2009.com will only be encountered by a user who's hosts file has been tampered with by a Trojan. The Winsecure2009.com webpage displays a fabricated security warning, followed by a strong recommendation to purchase Antivirus System PRO in order to continue browsing safely. Antivirus System PRO is a useless anti-spyware application that cannot be trusted.

File System Details

Winsecure2009.com creates the following file(s):
# File Name Detections
1. %WINDOWS%\system32\iehelper.dll N/A
2. %WINDOWS%\sysguard.exe N/A

Registry Details

Winsecure2009.com creates the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"

Trending

Most Viewed

Loading...