Home Malware Programs Browser Hijackers Homepagetoday.com

Homepagetoday.com

Posted: September 11, 2008

Homepagetoday.com is a rogue website, home of rogue anti-spyware programs Window Antivirus 2008 and Ultimate Antivirus. Homepagetoday.com is known to advertise Window Antivirus 2008 and Ultimate Antivirus as a legitimate softwares to remove supposed spyware threats from your computer system. Once you download Window Antivirus 2008 or Ultimate Antivirus, it will prompt popups and misleading notifications stating you're infected with spyware. If you click on any of these messages, you'll be redirected to Homepagetoday.com where you can purchase Window Antivirus 2008's and Ultimate Antivirus's "licensed" programs. Stay away from Homepagetoday.com, all you might get from being anywhere near this site is a whole load of trouble.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 cfqbw.dll
    2 fdpzgi.dll
    3 gtawclv.dll
    4 iesplugin.dll
    5 iesuninst.exe
    6 isaddon.dll
    7 isamini.exe
    8 isamonitor.exe
    9 khtbpdl.dll
    10 Online Security Guide.url
    11 pmmon.exe
    12 pmsngr.exe
    13 pmuninst.exe
    14 Security Troubleshooting.url
    15 veptlh.dll
    16 vjxwnn.dll
    17 vmlwp.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{80ced3d6-ece9-48ba-8df8-2503d8d87c2b}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper objects\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}IExplorer Security Plug-inInternet Explorer Secure BarMessenger Service
Loading...