Home Rogue Websites SysHomePage.com/security/

SysHomePage.com/security/

Posted: November 17, 2008

SysHomePage.com/security/ is a rogue website that hijacks your home page. On the fraudulent site a fake security warning pop up is displayed saying:

"Warning!
W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer."

SysHomePage.com/security/ displays these false security warnings in order to convince you to purchase the bogus Window Antivirus 2008 or Ultimate Antivirus programs.

SysHomepage.com/security is identical to HomePageOnWeb.com/security/xp browser hijacker and many other sites that promote the sham Windows Antivirus 2008 and Ultimate Antivirus 2008. While on the SysHomePage.com/security/ you may be infected with Trojans and other malware.

SysHomePage.com/security/ is a malicious site. Don't be tricked into purchasing these useless security programs. Remove the infection as soon as possible with a reliable anti-spyware software.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 gtawclv.dll
    2 icmntr.exe
    3 icthis.exe
    4 ictun.exe
    5 icun.exe
    6 isfmm.exe
    7 isfmntr.exe
    8 isfun.exe
    9 msmsgs.exe
    10 nvctrl.exe
    11 Online Security Guide.url
    12 pmmon.exe
    13 Security Troubleshooting.url
    14 spwoqbmv.exe
    15 VideoAccessCodecInstall.exe
    16 xbaqktfv.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}IExplorer Security Plug-inInternet Explorer Secure Bar
Loading...