Antiaid.com Description

Antiaid.com is a malicious domain that advertises the rogue anti-spyware program AntiAID. Users will only encounter Antiaid.com if they have previously been infected with a stealthy Trojan related to the infection. Antiaid.com presents the fake security tool, AntiAID, as a reliable tool that can remove parasites. Antiaid.com contains misleading information; do not be fooled into purchasing the AntiAID rogueware.

Type: Rogue Websites

How Can You Detect Antiaid.com?

Antiaid.com has typically the following processes in memory:

• %Temp%\2gbk87zj.exe
• %Program Files%\AntiAID Software\AntiAID\uninstall.exe
• %Program Files%\AntiAID Software\AntiAID\AntiAID.exe
• %Temp%\8enyqcv1.exe

Antiaid.com creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “%System%\8enyqcv1.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiAID
• HKEY_LOCAL_MACHINE\SOFTWARE\AntiAID
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “%ProgramFiles%\AntiAID Software\AntiAID\AntiAID.exe -min”

Important Article Disclaimer