Home Rogue Websites Securitysolution2011on.com

Securitysolution2011on.com

Posted: July 25, 2011

Securitysolution2011on.com is a malicious website and a browser hijacker that forces your browser to visit said website. Securitysolution2011on.com sells one variant of a rogue security program from a growing family of clones that share similar characteristics and attack methods. Although securitysolution2011on.com will pretend to sell the Security Solution 2011 program as an anti-spyware and anti-virus tool, our SpywareRemove.com malware analysts have found that the securitysolution2011on.com rogue anti-spyware software can't find or delete infections of any type. Browser hijacks by securitysolution2011on.com programs may also force you to visit securitysolution2011on.com in the hope of stealing your credit card information. Avoid giving in to securitysolution2011on.com's pushy sales tactics; instead, remove securitysolution2011on.com infections from your PC with a competent anti-malware scanner.

Securitysolution2011on.com is Far from Being the Security Solution That You Need

Securitysolution2011on.com uses browser hijackers and other malicious marketing methods to encourage you to visit the securitysolution2011on.com website. From there, securitysolution2011on.com will encourage you to purchase its one and only product, Security Solution 2011. The securitysolution2011on.com website would like you to believe that Security Solution 2011 comes from a long and prestigious line of anti-spyware and anti-virus programs, but our SpywareRemove.com research team hasn't found any evidence that securitysolution2011on.com's product has any real anti-malware features.

In fact, what our malware analysts did find is that securitysolution2011on.com is linked to the same ring of websites that sell other rogue security programs that are clones of each other in both looks and overall functions. Letting a securitysolution2011on.com rogue security program stay on your computer is just asking to be subjected to fake warnings like the infamous 'Unlimited Defender Firewall' Alert, which you can see below:

"[rogue program name] Firewall Alert! – Scanning of your system is currently on, please waiting until the end. Your system affected by numerous virus attacks, [rogue program name] Firewall Alert recommends you to install proper software to protect your computer?"

These alerts have no real threat-detection functions; instead, 'Unlimited Defender Firewall' Alert and other pop-ups that are used by securitysolution2011on.com software will try to convince you to buy Security Solution 2011 or another rogue anti-spyware application. If you've done this by mistake, it's strongly recommended that you have your credit card canceled to avoid any more fraudulent bills.

Some of the Other Names That Securitysolution2011on.com Goes By

Our SpywareRemove.com malware researchers have also found that web browser hijacks are a common symptom of Securitysolution2011on.com infections. These browser hijacks may change your homepage, create fake warning screens to block websites or redirect you to securitysolution2011on.com at various moments.

In addition to staying away from securitysolution2011on.com itself, there is also a small hoard of securitysolution2011on.com clones that should be avoided. Some nearly-identical websites that market other rogue security programs from the same criminal minds include Defenderunlimited.com, Clean-security.com, Ultimate-guard.com, Unlimguard.com, Unlimdefender.com and Ultimate-scan.com.

Each of these websites also markets its own rogue anti-spyware program that's as good as a copy of Security Solution 2011, such as Defender Unlimited, Ultimate Guard and Unlimited Guard (all of which may be referenced with or without the '2011' suffix).

Contact with any of the above sites or programs will expose you to more securitysolution2011on.com attacks, including drive-by-downloads and credit card theft, so you should be careful to use anti-malware software to guard against all of them as though they were securitysolution2011on.com itself.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[User Name]\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Solution 2011.lnk
    2 %Documents and Settings%\[User Name]\Application Data\Security Solution 2011\
    3 %Documents and Settings%\[User Name]\Application Data\Security Solution 2011\IcoActivate.ico
    4 %Documents and Settings%\[User Name]\Application Data\Security Solution 2011\IcoHelp.ico
    5 %Documents and Settings%\[User Name]\Application Data\Security Solution 2011\IcoUninstall.ico
    6 %Documents and Settings%\[User Name]\Application Data\Security Solution 2011\Security Solution.exe
    7 %Documents and Settings%\[User Name]\Application Data\Security Solution 2011\securityhelper.exe
    8 %Documents and Settings%\[User Name]\Application Data\Security Solution 2011\securitymanager.exe
    9 %Documents and Settings%\[User Name]\Desktop\Security Solution 2011.lnk
    10 %Documents and Settings%\[User Name]\Local Settings\Temp\[random].exe
    11 %Documents and Settings%\[User Name]\Start Menu\Programs\Security Solution 2011.lnk
    12 %Documents and Settings%\[User Name]\Start Menu\Programs\Security Solution 2011\
    13 %Documents and Settings%\[User Name]\Start Menu\Programs\Security Solution 2011\Activate Security Solution 2011.lnk
    14 %Documents and Settings%\[User Name]\Start Menu\Programs\Security Solution 2011\Help Security Solution 2011.lnk
    15 %Documents and Settings%\[User Name]\Start Menu\Programs\Security Solution 2011\How to Activate Security Solution 2011.lnk
    16 %Documents and Settings%\[User Name]\Start Menu\Programs\Security Solution 2011\Security Solution 2011.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "(Default)" = "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Solution 2011 Security"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Solution 2011"HKEY_CURRENT_USER\Software\Security Solution 2011HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Security Solution 2011

Technical Details

Additional Information

The following messages's were detected:
# Message
1[Rogue program name] Firewall Alert! – Scanning of your system is currently on, please waiting until the end. Your system affected by numerous virus attacks, [rogue program name] Firewall Alert recommends you to install proper software to protect your computer?

Loading...