Osawarepro2009.microsoft.com Description

Osawarepro2009.microsoft.com is a malicious web page that promotes the fake anti-spyware program Antivirus System PRO. Sneaky Trojans help spread Osawarepro2009.microsoft.com by surreptitiously infecting users’ systems. On entering a system, Osawarepro2009.microsoft.com will display a fake warning that the victim is browsing an infected website. The victim will then be advised to purchase Antivirus System PRO in order to continue browsing safely. Osawarepro2009.microsoft.com and Antivirus System PRO are not to be trusted and should be removed with a recognized security application immediately.

Type: Rogue Websites

How Can You Detect Osawarepro2009.microsoft.com?

Osawarepro2009.microsoft.com has typically the following processes in memory:

• c:\WINDOWS\system32\iehelper.dll

Osawarepro2009.microsoft.com creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus System PRO”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
• HKEY_CURRENT_USER\Software\AvScan
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
• HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad “ieModule”
• HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}

Important Article Disclaimer