New Rogue!! WiniBlueSoft
Yet another rogue anti-spyware application has been released. This time it's called WiniBlueSoft.
WiniBlueSoft is a clone of the known rogue, WiniGuard.
WiniBlueSoft installs the following items:
Files
setup.exe
%ProgramFiles%WiniBlueSoft.exe
%CommonDesktop%WiniBlueSoft.lnk
Folders
%ProgramFiles%WiniBlueSoft Software
%CommonPrograms%WiniBlueSoft
RegistryEntries
Key: HKEY_CURRENT_USER\Software\WiniBlueSoft
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WiniBlueSoft
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value: WiniBlueSoft
Data: C:\Program Files\WiniBlueSoft Software\WiniBlueSoft\WiniBlueSoft.exe -min
