Home Malware Programs Browser Hijackers HomeSiteUrls.com/Security/

HomeSiteUrls.com/Security/

Posted: September 22, 2008

HomeSiteUrls.com/Security/ is a hijacking web page that creates fake security warnings for threats that do not exist on your system. HomeSiteUrls.com/Security/ is designed to promote other rogue anti-spyware programs such as Win Antivirus 2008, Windows Antivirus 2008 and Ultimate Antivirus. If you ever land on the HomeSiteUrls.com/Security/ page then you may be greeted by several popup warnings.

Usually you are redirected to HomeSiteUrls.com/Security/ from other malicious sites or even spam messages sent to your email inbox. Recently, we have noticed that the HomeSiteUrls.com/Security/ site is not active and only displays an "account suspended" notification. It is still recommended that you avoid visiting HomeSiteUrls.com/Security/. You should utilize a reputable spyware removal tool to scan your system if you find that you are being automatically redirected to HomeSiteUrls.com/Security/

File System Modifications

  • The following files were created in the system:
    # File Name
    1 gtawclv.dll
    2 icmntr.exe
    3 icthis.exe
    4 ictun.exe
    5 icun.exe
    6 isfmm.exe
    7 isfmntr.exe
    8 isfun.exe
    9 msmsgs.exe
    10 nvctrl.exe
    11 Online Security Guide.url
    12 pmmon.exe
    13 Security Troubleshooting.url
    14 spwoqbmv.exe
    15 VideoAccessCodecInstall.exe
    16 xbaqktfv.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}IExplorer Security Plug-inInternet Explorer Secure Bar
Loading...