Home Malware Programs Browser Hijackers Downloadavr50.com

Downloadavr50.com

Posted: January 27, 2010

Downloadavr50.com is a malicious Browser Hijacker designed to spread malware. Downloadavr50.com is armed with downloader program that contains malicious executables and scripts associated with Internet Security 2010 rogue antispyware. Internet users will get redirected to Downloadavr50.com after a browser is infected with a Trojan. Downloadavr50.com will use devious tactics to convince the hapless user that the system has become infected and that the only way to get rid of the parasites is by purchasing Internet Security 2010. Do not become another victim of cybercrime, simply ignore Downloadavr50.com's warnings and delete it from the browser. Use reliable anti-virus software to make sure all threats associated with Internet Security 2010 are terminated.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
    2 %Documents and Settings%\[USER]\Cookies\user@buy[1].txt
    3 %Documents and Settings%\[USER]\Desktop\Internet Security 2010.lnk
    4 %Documents and Settings%\[USER]\Desktop\SetupIS2010.exe
    5 %Documents and Settings%\[USER]\Start Menu\Internet Security 2010.lnk
    6 %Program Files%\InternetSecurity2010
    7 %Program Files%\InternetSecurity2010\IS2010.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Internet Security 2010HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "IS2010.exe"HKEY_LOCAL_MACHINE\SOFTWARE\Internet Security 2010
Loading...