Microantiviruslive.com

Microantiviruslive.com is a malicious web domain that malvertises fake security applications such as XP Antivirus Pro 2010. Microantiviruslive.com is encountered by victims of Trojan infections working hand in hand with the deceptive website. Once a victim visits Microantiviruslive.com, a fake online system scan will be conducted and a scan report will be produced claiming that the system is infected with harmful malware. Bogus security alerts and pop-up messages will also be displayed in order to scare the victim into purchasing the supposed "licensed version" of XP Antivirus Pro 2010. This is an online scam that you should be careful not to fall for. Should you encounter Microantiviruslive.com, use a reliable anti-spyware application to remove it and any other malware on your PC.

File System Details

Microantiviruslive.com may create the following file(s):
# File Name Detections
1. %UserProfile%\Local Settings\Application Data\av.exe
2. Av.exe
3. %UserProfile%\Local Settings\Application Data\WRblt8464P

Registry Details

Microantiviruslive.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"

1 Comment

Marisa Naujokas Reply

I got hit with this today. I clicked on an unrelated Web site and the whole thing came up exactly as described here. Thanks for posting this information. It was helpful.

Trending

Most Viewed

Loading...