Your Security Plus

The www.yoursecurityplus.com domain/website
What is yoursecurityplus.com? Yoursecurityplus.com aka the your securityplus.com is a fake security website that makes its viewers think that it is a legitimate antivirus software vendor site. Yoursecurity plus com promotes the Windows Defender 2010 anti virus.

Windows Defender 2010: The your security plus.com scam

Windows Defender 2010 is already identified as a fake virus and spyware protection software. Fake antiviruses are characterized by bogus system scans, constant popups and browser hijacking, which may explain why the yoursecurityplus virus keeps you redirected to the rogue http:// Yoursecurityplus.com website.

Do not even think about paying for Yoursecurityplus.com license key offered to you. The fake antivirus protection software that the yoursecurityplus.com virus offers will not get rid of viruses, trojans and other malwares in your computer.

Your Security Plus Removal: How to remove your security plus
To remove yoursecurityplus malware, remove the following your security plus files and registry entries in your PC:

* %Documents and Settings%\[UserName]\Application Data\ave.exe

* HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “ave.exe” /START “%1? %*
* HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “ave.exe” /START “%1? %*
* HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “ave.exe” /START “%1? %*
* HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “ave.exe” /START “%1? %*
* HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “ave.exe” /START “firefox.exe”
* HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “ave.exe” /START “firefox.exe” -safe-mode
* HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “ave.exe” /START “iexplore.exe”
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?

You may also want to read this article on how to get rid of yoursecurityplus.com Windows Defender 2010 infection.
4/14/2010