Home Rogue Websites VistaStabilityNow.com

VistaStabilityNow.com

Posted: March 30, 2009

VistaStabilityNow.com is a malicious web site that may contain scripts that could further infect your computer with malware. VistaStabilityNow.com may be affiliated with System Security which is a rogue anti-spyware application.

VistaStabilityNow.com may be part of the same scam associated with System Security as it attempts to get computer users to purchase a full version of System Security. VistaStabilityNow.com is not what it seems, it is completely bogus and should not be trusted. Avoid VistaStabilityNow.com at all costs. If VistaStabilityNow.com has been replaced as your default home page, your computer is probably infected with a type of malware. It is recommended that you remove VistaStabilityNow.com and System Security files immediately to prevent further harm to your computer and your privacy.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %\Documents and Settings%\All Users\Application Data\538654387
    2 %\Documents and Settings%\All Users\Application Data\538654387\1632575944.exe
    3 %\Documents and Settings%\All Users\Application Data\538654387\config.udb
    4 %\Documents and Settings%\All Users\Application Data\538654387\init.udb
    5 %\Documents and Settings%\All Users\Application Data\538654387\Languages
    6 %\Documents and Settings%\All Users\Application Data\538654387\Languages\English.lng
    7 %\Documents and Settings%\All Users\Application Data\538654387\Languages\German.lng
    8 %\Documents and Settings%\All Users\Application Data\538654387\Languages\Spanish.lng
    9 %UserProfile%\Desktop\System Security.lnk
    10 %UserProfile%\Start Menu\Programs\System Security
    11 %UserProfile%\Start Menu\Programs\System Security\System Security.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "1632575944"
Loading...