Home Malware Programs Browser Hijackers Buy-IS2010.com

Buy-IS2010.com

Posted: February 9, 2010

Buy-IS2010.com is a browser hijacker designed to promote Internet Security 2010 rogue anti-spyware. Internet users often get redirected to Buy-IS2010.com after Trojans infect their computers. Buy-IS2010.com will use various tactics to claim that the system has become infected and warns that the only way to get rid of the parasites is by purchasing Internet Security 2010. Do not become another victim of cyber-crime. Ignore Buy-IS2010.com's warnings and delete the URL from the browser. Then use an effective anti-spyware kit to remove all threats associated with Internet Security 2010.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Program Files%\InternetSecurity2010
    2 %Program Files%\InternetSecurity2010\IS2010.exe
    3 %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
    4 %UserProfile%\Desktop\Internet Security 2010.lnk
    5 %UserProfile%\Start Menu\Internet Security 2010.lnk
    6 %WINDOWS%\system32\smss32.exe
    7 %WINDOWS%\system32\winhelper86.dll
    8 %WINDOWS%\system32\winlogon86.exe
    9 %WINDOWS%\system32\winupdate86.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\IS2010HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Security 2010HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winupdate86.exe"
Loading...