New Rogue!! WiniBlueSoft

by Albin on April 23rd, 2009 in Rogues.

Yet another rogue anti-spyware application has been released. This time it's called WiniBlueSoft. 

 

WiniBlueSoft is a clone of the known rogue, WiniGuard.

 

WiniBlueSoft installs the following items:

Files

setup.exe

%ProgramFiles%WiniBlueSoft.exe

%CommonDesktop%WiniBlueSoft.lnk

Folders

%ProgramFiles%WiniBlueSoft Software

%CommonPrograms%WiniBlueSoft

RegistryEntries

Key: HKEY_CURRENT_USER\Software\WiniBlueSoft

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WiniBlueSoft

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value: WiniBlueSoft
Data: C:\Program Files\WiniBlueSoft Software\WiniBlueSoft\WiniBlueSoft.exe -min