Home Rogue Websites Antispyroad.com

Antispyroad.com

Posted: November 3, 2010

Antispyroad.com is a rogue website advertising Antivirus Action. If your browser redirects to antivirsnow.com your PC is most likely infected with malware related to Antivirus Action. Do not fall for the trickery Antivirus Action and antispyroad.com uses to pilfer money from unwary computer users. A reliable malware remover is recommended to make sure your PC is free of all threats.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Temp%\[random]\
    2 %Temp%\[random]\[random]agnz.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"HKEY_CURRENT_USER\Software\[random]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [random]agnz.exe"
Loading...