Gahsoft.com

By LoneStar in Rogue Websites

When you go online, do you notice that your browser keeps getting redirected to Gahsoft.com? If so, proceed with caution, because your computer is infected with a hijacker. Gahsoft.com is a malicious site, and it is very important that you do not buy anything it claims to be selling, or download anything there, since doing so would put your security at even greater risk.

What is Gahsoft.com, Really?

The Gahsoft.com hijacker can find its way to your computer with the help of a Trojan. The Trojan will typically be hidden in something that you download, something that looks completely harmless, and you don't notice that anything malicious has just gotten onto your computer. Once the Trojan is downloaded, it installs the Gahsoft.com hijacker. Then, you will see a variety of symptoms that make it apparent that something is wrong. Aside from having your browser constantly redirect you to Gahsoft.com, you may also see pop-up advertising promoting Gahsoft.com or a fake anti-virus program called Antivirus .Net. You may even find yourself redirected to websites that look like free online system scans, but which are actually the hijacker's attempt at installing Antivirus .Net on your computer. Ultimately, the purpose of Gahsoft.com and the hijacker that redirects is to get you to install another piece of malware, Antivirus .Net.

The Gahsoft.com hijacker has the capability to do serious damage to your computer. It changes some things in the Windows registry, and it alters the proxy settings in your web browser. Gahsoft.com also has the potential to include other malware components, and these can put your system and your own information at risk. Even if the only malware present on your system is the hijacker, it draws on system resources and can make the whole thing unstable or possibly cause your computer to crash.

Do not, under any circumstances, attempt to visit the website Gahsoft.com. In order to protect yourself, remove the hijacker as soon as possible.

File System Details

Gahsoft.com may create the following file(s):
# File Name Detections
1. %Temp%\[random]\[random].exe
2. %Temp%\[random]\

Registry Details

Gahsoft.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""

Trending

Most Viewed

Loading...