Home Rogue Websites Yourguardpro.cn

Yourguardpro.cn

Posted: April 13, 2009

Yourguardpro.cn is a hijacker website that promotes or advertises Antivirus Plus. Antivirus Plus is a fake anti-spyware program that is dangerous to have installed. Yourguardpro.cn was probably developed by the same group of attackers who distribute Antivirus Plus in hopes that people will purchase this worthless program. If you mistakenly visit Yourguardpro.cn, then you must perform a scan using a reputable anti-spyware program to eliminate any threats that could have been installed by Yourguardpro.cn.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %WINDOWS%\system\rundll32.exe
    2 Antivirus Plus.lnk
    3 AntivirusPlus.exe
    4 Uninstall Antivirus.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntivirusPlus"
Loading...