Scanner.av2-site.info
Scanner.av2-site.info is a browser hijacker web site that pushes the rogue anti-spyware program Antivirus. Scanner.av2-site.info, once visited, will attempt to scan your computer. After scanning, Scanner.av2-site.info will display several bogus parasite results and display critical warning messages that are also fabricated all in an attempt to get you to purchase the Antivirus rogue application. Avoiding Scanner.av2-site.info is suggested to reduce the risk of downloading additional malware on your computer.
File System Details
Scanner.av2-site.info may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Program Files%\Antivirus\AvBho.dll | |
| 2. | %Program Files%\Antivirus\Antivirus.exe | |
| 3. | %Program Files%\Antivirus\wscsvc32.exe | |
| 4. | %Temp%\winupd64x.exe | |
| 5. | %Program Files%\Antivirus\Uninstall.exe | |
| 6. | %Documents and Settings%\All Users\Start Menu\Programs\Antivirus\Antivirus.lnk | |
| 7. | %Program Files%\Antivirus | |
| 8. | %Documents and Settings%\All Users\Start Menu\Programs\Antivirus | |
| 9. | %AppData%\Microsoft\Internet Explorer\Quick Launch\Antivirus.lnk | |
| 10. | %Documents and Settings%\All Users\Desktop\Antivirus.lnk | |
| 11. | %Documents and Settings%\All Users\Start Menu\Programs\Antivirus\Uninstall.lnk |
Registry Details
Scanner.av2-site.info may create the following registry entry or registry entries:
HKEY_CLASSES_ROOT\CLSID\{9d541c6a-573b-4888-b35e-6816e68c3620}
HKEY_CLASSES_ROOT\TypeLib\{65DA0CE6-30D1-4144-A0B6-59BD01372E26}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus
HKEY_CLASSES_ROOT\AvBho.AvBhoApp.1
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9d541c6a-573b-4888-b35e-6816e68c3620}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "wscsvc32.exe"
HKEY_CLASSES_ROOT\AvBho.AvBhoApp
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus.exe"
