Home Rogue Websites FreeDefense2u.cn

FreeDefense2u.cn

Posted: April 27, 2009

FreeDefense2u.cn is a browser hijacker and rogue website that promotes the fake anti-spyware application AntivirusPlus. Trojans will infect your PC and then FreeDefense2u.cn will recommend running a free scan which will report non-existent infections. The purpose of this deception is to trick you into purchasing the full paid version scamware AntivirusPlus. Don't be fooled and most of all don't purchase AntivirusPlus. Remove the infections immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Program Files%\Antivirus Plus\Antivirusplus.exe
    2 %System%\avphl.dll
    3 %System%\internetexplorer.dll
    4 Antivirus Plus.lnk
    5 Uninstall Antivirus.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntivirusPlus"
Loading...