Browsersafeon.com Description

Browsersafeon.com is classified as a Browser Hijacker. Browsersafeon.com is a just another mean to promote the rogue anti-spyware program Alpha Antivirus. Users are going to face it only after their system has been affected by trojans, associated with the rogue. The trojans invade the system secretly, and change the browser settings.

The result of this is constant redirections to the URL browsersafeon(dot)com/block.php. This link is a false alert message, stating that the website the user is browsing could influence his computer. The user then has an option to either “Continue Unprotected” or “Get security software”. If the user selects the latter, he/she is going to be taken straight to the purchase page of Alpha Antivirus, which is a bogus software program. Users should not rely on this website and remove Alpha Antivirus immediately after its detection.

Type: Browser Hijackers

How Can You Detect Browsersafeon.com?

Browsersafeon.com has typically the following processes in memory:

• %WINDOWS%\system32\msnaoladdon.dll
• %WINDOWS%\system32\NetFilter.exe
• %WINDOWS%\system32\drivers\NDISRD.sys
• %Program Files%\AlphaAV\AlphaAV.exe
• %WINDOWS%\system32\ndisapi.dll

Browsersafeon.com creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Alpha Antivirus
• HKEY_LOCAL_MACHINE\Software\Alpha Antivirus
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Alpha Antivirus”
• HKEY_CURRENT_USER\Software\Alpha Antivirus
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “AlphaAV”

Important Article Disclaimer