Alphaantivir.microsoft.com Description
Alphaantivir.microsoft.com (or Alphaantivir.com) is a deceitful domain that promotes the rogueware called AntiSpyware Soft. Alphaantivir.microsoft.com can be placed into a computer's Host file by Trojans, causing the machine browser to be frequently redirected to the criminal website. Alphaantivir.microsoft.com may display fake security alerts and warning messages to persuade users that their machines are infected and they need to purchase AntiSpyware Soft in order to remove all the "detected" threats. Users should ignore all security notifications displayed on Alphaantivir.microsoft.com and use a reliable security tool to remove all malware associated with the website.
Technical Information
Registry Details
Alphaantivir.microsoft.com creates the following registry entry or registry entries:
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "{random}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "{random}"