Antivar Solution Pro
Antivar Solution Pro is a clone of the rogue anti-spyware program called Antivir Solution Pro. Antivar Solution Pro can propagate via Trojans. Once Antivar Solution Pro is inside a PC, it will generate fake security alerts and convince a victim that his/her computer is infested with malware. Then the victim will be prompted to purchase the "full version" of Antivar Solution Pro in order to remove the malware. This is a scam; Antivar Solution Pro is a useless application that users should never waste their money on.
File System Details
Antivar Solution Pro may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %UserProfile%\Local Settings\Application Data\\.exe | |
| 2. | %UserProfile%\Local Settings\Application Data\\ |
Registry Details
Antivar Solution Pro may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\AVSolution
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_CURRENT_USER\Software\AVSuitE
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\AVSolution
HKEY_LOCAL_MACHINE\SOFTWARE\AVSuitE
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5643"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ""
