Home Malware Programs Browser Hijackers Softwarean.net

Softwarean.net

Posted: February 17, 2011

Softwarean.net is a malicious website that uses the rogue product AntiVira Av to steal money from its 'customers.' Even simply visiting Softwarean.net without interacting with it may open you up to attack by malware such as keyloggers and security-lowering Trojans. Some Trojans have been noted to contact Softwarean.net automatically, creating a level of risk for your computer that may spiral out of control. If you find yourself redirected towards Softwarean.net at any point in time, you should strongly consider shutting everything down and running a scan in Safe Mode with verified anti-virus scanners.

How Softwarean.net Earns Your Distrust

Softwarean.net is one of several similarly-designed websites that promote AntiVira Av. The AntiVira Av rogue scanner will, when inhabiting a system, create a profusion of deceitful error messages and take over your desktop to perform scans with worthless results. As if that's not enough, AntiVira Av is also distributed by malicious Trojans that get users to install Softwarean.net by misleading them through desktop error messages. As a verified rogue anti-virus product, AntiVira Av has no possible use for your computer and is a threat.

Since Softwarean.net is run by what amounts to cyber-criminals, you can't trust them to handle your information with respect. Any money you transfer through this site will vanish, and your website may even be tapped for further funds. This is especially probable in the case of subscripting to AntiVira Av or another rogue anti-virus product, in which case the criminals will simply refuse to unsubscribe you indefinitely while enjoying automated payments.

Your money isn't the only element being risked when interacting with Softwarean.net. Softwarean.net can also use your personal info for identity theft and illegal transactions. If it's too late and you've purchased a Softwarean.net product without knowing the danger, immediately get on the phone with your credit card company and try to cancel all charges.

If your web browser is hijacked and redirected towards Softwarean.net, then you have a related malware infection that should be dealt with immediately. A hijacking may be sneaky and embed itself as links in ordinary content, or display a fake warning message to make you think Softwarean.net is redirecting you to somewhere safe.

The Other Malware Softwarean.net Offers

Malicious websites like Softwarean.net will also commonly download other kinds of malware onto your computer, even if you don't intentionally download the rogue product AntiVira Av. Some indications of problems with your computer related to visiting Softwarean.net can include:

  • The aforementioned web browser hijacking. This can balloon to the point of being completely unable to visit legitimate websites, and is likely to target Firefox, as well as Internet Explorer.
  • Unusual interface behavior such as unresponsive cursor movement. This may be due to keyloggers and other spyware recording the information on your browser or your even whole computer.
  • Strange files or folders appearing on your desktop, in your hard drive, or in Task Manager processes. This includes apparent duplicates of critical system files, since many kinds of malware will name themselves after Windows files to make detection challenging.

Although Softwarean.net by itself and most related infections are only moderate threats, they are capable of creating more infections on your computer. Deleting all Softwarean.net-related cookies and other evidences of its presence on your computer will stop the snowballing of malware before Softwarean.net starts.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %TempDir%\[random]
    2 %TempDir%\[random]\[random].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKCU\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"HKCU\Software\Microsoft\Windows\CurrentVersion\Run "[random].exeHKEY..\..\..\..{RegistryKeys}HKCU\Software[random]
Loading...