Home Rogue Websites EasyAddedAntivirus.com

EasyAddedAntivirus.com

Posted: April 2, 2009

EasyAddedAntivirus.com is home to the rogue anti-spyware utility known as Antivirus Plus (also known as Antivirus+). The EasyAddedAntivirus.com websites contains malicious scripts and usually drops a Trojan downloader virus called Win32/Renos.BAO, which occurs the very first time you visit EasyAddedAntivirus.com.

The domain under consideration is typically hit after a different Trojan horse infects your system imperceptibly using the vulnerabilities in your firewall and other security flaws. This Trojan will then cause your browser to redirect to certain web pages that state your computer is infected and suggests following EasyAddedAntivirus.com domain to fix the problems.

The most noticeable elements of EasyAddedAntivirus.com's design are the "Free Download" and "Scan Your PC for Free" options. If you do decide to scan your PC on EasyAddedAntivirus.com, dozens of false infections will be detected. Be sure to remove this hijacker and the Trojan that is causing the redirections as soon as possible to prevent yourself from being lured into paying for the useless and hazardous "full version" of Antivirus Plus.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Program Files%\Antivirus Plus\Antivirusplus.exe
    2 %System%\avphl.dll
    3 %System%\internetexplorer.dll
    4 Antivirus Plus.lnk
    5 Uninstall Antivirus.lnk
Loading...