Home Malware Programs Browser Hijackers Antispyfortress.com

Antispyfortress.com

Posted: May 13, 2010

Antispyfortress.com (Antispyfortress.net) is a browser hijacker connected to the rogue anti-spyware application called AntiSpyware Soft. Once your browser is redirected to antispyfortress.com it will run a fake scan which produces bogus results claiming the system is infected with all sorts of malware. Popup warnings will urge you to purchase AntiSpyware Soft to remove the alleged threats. Do not fall for this and have AntiSpyware Soft and antispyfortress.net terminated immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe
    2 %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\AvScanHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random string]"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random string]"
Loading...