Spyware



July 22, 2008

Otherhomepagecom

Filed under: Spyware News — Spyware Parasites: Terms and Definitions @ 11:32 am
Otherhomepage.com, also known as Otherhomepage.com/xp and Otherhomepage.com/vista, is a browser hijacker created to promote rogue anti-spyware programs, such as, Window Antivirus 2008, Ultimate AntiVirus 2008, AntiSpyCheck, AntiSpyware Shield, Win SpyKiller, among others. Otherhomepage.com installs itself and some Trojan friends into your computer with one finale: computer system massive destruction. Once installed, Otherhomepage.com may redirect your Internet browser to Otherhomepage.com/xp, where rogue anti-spyware programs are sold. Otherhomepage.com may run its fake system scanner to lure you into buying its products. Otherhomepage.com may also show fake popups, like: "Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer. Type: Virus Infection Length: 138,293 bytes Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs) Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows. Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker. Recomendations [SIC]: Click "OK" to download officially approved security software. Always keep your patch levels up-to-date." Otherhomepage.com will insist on your W32.Myzor.FK@yfis infection, only to push you to buy the rogue softwares it advertises. Otherhomepage.com is a clone of SafeBrowseNow.com, DoBrowSesecure.com, SecureArticle.com, ProtectStartPage.com and InstantSafePage.com. Otherhomepage.com may boot every time IE or Firefox are launched.

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.

Powered by WordPress