Winsecure2009.com
Winsecure2009.com is a misleading webpage that uses a Trojan to spread as it infects unsuspecting users' systems. Winsecure2009.com, also known as Winsecure2009.microsoft.com, is not in any way connected to the legitimate Microsoft. Winsecure2009.com will only be encountered by a user who's hosts file has been tampered with by a Trojan. The Winsecure2009.com webpage displays a fabricated security warning, followed by a strong recommendation to purchase Antivirus System PRO in order to continue browsing safely. Antivirus System PRO is a useless anti-spyware application that cannot be trusted.
File System Details
Winsecure2009.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\iehelper.dll | |
| 2. | %WINDOWS%\sysguard.exe |
Registry Details
Winsecure2009.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"
