Internet Security Premium

Posted: June 10, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	91

First Seen:	June 10, 2013
OS(es) Affected:	Windows

Internet Security Premium is one of the latest fake anti-malware programs from the FakeRean family. Internet Security Premium's attacks involve combinations of intentionally inaccurate warning messages, many of which imitate other Windows programs, along with fake scans that detect various threats on your PC. Because Internet Security Premium's family habitually blocks most other applications, SpywareRemove.com malware experts rate Internet Security Premium as a mid-level threat to your PC and a security risk that should be exterminated quickly. However, deleting Internet Security Premium without using a suitable anti-malware tool may fail to remove all of Internet Security Premium's system changes that are affecting your computer.

Why You Shouldn't Shell Out a Premium for Internet Security Premium's Protection

Internet Security Premium borrows the same basic template as other members of FakeRean, is designed to imitate the appearance of an anti-malware scanner without having any legitimate anti-malware features. Internet Security Premium's alerts are diverse in format, and can include fake firewall errors, warnings about worms, fake warnings about large quantities of generically-described infections and numerous prompts to register Internet Security Premium. Belying its appearance, Internet Security Premium actually is an illegal program that can't help protect your PC, and SpywareRemove.com malware researchers explicitly do not condone purchasing Internet Security Premium.

The most common security issues related to Internet Security Premium and most other FakeRean-based scamware products are problems with accessing other applications, which can be blocked by Internet Security Premium. In some cases, renaming the relevant program files to the names of critical Windows programs will allow you to launch the software while Internet Security Premium is open, but before you do anything else, SpywareRemove.com malware researchers usually suggest trying to deactivate Internet Security Premium or any of its family members which also includes Antivirus 2008 Pro, Antivirus XP 2008, Windows Antivirus 2008, Vista Antivirus 2008, PC Clean Pro, Antivirus Pro 2009, Rogue.Vista Antivirus 2008, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, XP Security 2012, XP Home Security 2012 and AntiVirus PRO 2015.

Shutting Internet Security Premium's Scam Down at the Lowest Possible Price

As a security hazard that will block most other programs without any appropriate justification or consent, Internet Security Premium should be removed from your computer quickly. However, doing so usually requires that you shut Internet Security Premium down first, which can be accomplished through techniques like Safe Mode, booting from a flash drive or even using a dual-boot setup for switching your OS temporarily. SpywareRemove.com malware experts warn that, in the case that you've fallen for Internet Security Premium's scam, any personal information used to register Internet Security Premium should be treated as compromised and may be abused in further criminal attacks (such as fraudulent credit card charges).

With Internet Security Premium deactivated, deleting Internet Security Premium with a real anti-malware scanner should b a simple enough task. However, avoiding the sources of an Internet Security Premium infection certainly is preferable. With the FakeRean family, SpywareRemove.com malware researchers often see infection vectors compromising such strategies as fake Flash update and fake online scanners that are generated through malicious pop-ups and other e-advertising sources. In some cases, Trojan droppers and downloaders also have been known to install Internet Security Premium and other rogue anti-malware programs.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

itdefender.exe

File name: itdefender.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

indefender.exe

File name: indefender.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

isecurity.exe

File name: isecurity.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

amsecure.exe

File name: amsecure.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

winupd.exe

File name: winupd.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

3C2.TMP

File name: 3C2.TMP
File type: Temporary File
Mime Type: unknown/TMP
Group: Malware file

C:\Documents and Settings\<username>\Application Data\itdefender.exe

File name: C:\Documents and Settings\<username>\Application Data\itdefender.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

C:\Documents and Settings\<username>\AppData\itdefender.exe

File name: C:\Documents and Settings\<username>\AppData\itdefender.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

%TEMP%\[RANDOM].exe

File name: %TEMP%\[RANDOM].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

%TEMP%\winupd.exe

File name: %TEMP%\winupd.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

%AppData%\itdefender.exe

File name: %AppData%\itdefender.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

%Desktop%\Internet Security Premium.lnk

File name: %Desktop%\Internet Security Premium.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\itdefender.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "itdefender.exe"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Internet Security Premium"