Home Rogue Websites WebSecurityMaster.com

WebSecurityMaster.com

Posted: April 7, 2009

Websecuritymaster.com is another of the many malicious domains out there at the moment, endorsing the rogue anti-spyware program System Security 2009. By infiltrating your computer secretly with a Trojan virus through various backdoor techniques and holes in your security software, this Trojan modifies your browser settings in order to redirect you to the Websecuritymaster.com web page without your consent.

On this webpage, your computer becomes subject to a fraudulent system scan that instantly detects dozens of false infections, implementing basic scare tactics in order to get you to purchase and install System Security 2009 onto your PC. This rogue anti-spyware application does nothing for your computer, neither repairing or protecting your system from future attacks.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe
    2 %\Documents and Settings%\All Users\Application Data\00308937\config.udb
    3 %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
    4 %UserProfile%\Desktop\System Security 2009.lnk
    5 %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk
    6 %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\00308937HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run g00308937HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SystemSecurity2009
Loading...