Home Rogue Websites Getantivirusplus09.com

Getantivirusplus09.com

Posted: May 29, 2009

Getantivirusplus09.com is a rogue website sponsoring the fake spyware remover Antivirus Plus (also known as Antivirus+). To achieve this goal, affiliated trojans infiltrate your computer through holes in the security and alter the browser settings, causing your web-surfing activities to be interrupted and diverted to the Getantivirusplus09.com web page. Here your PC is subject to a fake online scan that typically reports numerous fraudulent infection results, all in order to scare you into purchasing Antivirus Plus.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Program Files%\Antivirus Plus\Antivirusplus.exe
    2 %System%\avphl.dll
    3 %System%\internetexplorer.dll
    4 Antivirus Plus.lnk
    5 Uninstall Antivirus.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntivirusPlus"
Loading...