Siegare.com
Siegare.com aka Siegare.net is a malicious website. Siegare.com is the payment page for the rogueware called Antivirus Action. Numerous scare tactics and fake security notifications will be displayed on a victim's machine in order to coerce him/her into paying for the full version of Antivirus Action. Users should avoid visiting or clicking on anything on Siegare.com and never waste money purchasing Antivirus Action.
File System Details
Siegare.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Temp%\{random}\{random}agnz.exe | |
| 2. | %Temp%\{random} |
Registry Details
Siegare.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\{random}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"
"{random}agnz.exe"
