Winshield2009.com
Winshield2009.com is a malicious web domain that is associated with the rogue anti-spyware program Antivirus System PRO. Winshield2009.com uses misleading tactics to force computer users into downloading and purchasing Antivirus System PRO in making them believe that they need it to remove parasites that a system scan found. Winshield2009.com has also been known to hijack web browsers and change certain settings without notification to the computer user.
File System Details
Winshield2009.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\iehelper.dll | |
| 2. | %WINDOWS%\sysguard.exe |
Registry Details
Winshield2009.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"
