Home Rogue Websites AddAntivirusPro.com

AddAntivirusPro.com

Posted: April 15, 2009

AddAntivirusPro.com is a browser hijacker that enjoys interrupting your web-surfing activities in order to redirect you to the AddAntivirusPro.com domain, which promotes the malicious rogue anti-spyware application, Antivirus Plus (or AntivirusPlus). With dozens of annoying pop-up windows flashing across your screen, stating that your PC is infected with numerous malware and viruses, it's no small wonder you may be frustrated enough to finally download and install Antivirus Plus onto your system.

It should be noted, however, that these frequent security alerts and infection results are all entirely bogus, and should in fact be taken with just a pinch of salt. They are nothing more than tactics used to intimidate you into purchasing the absolutely useless Antivirus Plus program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 20090414095452479.log
    2 killtask.bat
    3 P Antispyware 09.lnk
    4 pantispyware09.com
    5 pas.exe
    6 unins000.dat
    7 unins000.exe
    8 Uninstall P Antispyware 09.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "P Antispyware 09"HKEY_CURRENT_USER\Software\pantispyware09.comHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}P Antispyware 09_is1
Loading...