Home Rogue Websites A-fast.com

A-fast.com

Posted: May 5, 2010

A-fast.com (A-fast.net) is a rogue website that aides in the distribution of A-fast Antivirus. If your browser is redirected to a-fast.com then your PC is most likely infected with a Trojan related to A-fast Antivirus. Do not click on anything or fall for any of the popup warnings A-fast.net produces. It is all part of a blatant scam and the associated parasites should be terminated immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[UserName]\Desktop\A-fast Antivirus.lnk
    2 %Program Files%\A-fast
    3 %Program Files%\A-fast\A-fast.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\A-fastHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DosableTaskMgr" = "1"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "fast"HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List "%Program Files%\A-fast\A-fast.exe"
Loading...