Antiaid.com Description
Antiaid.com is a malicious domain that advertises the rogue anti-spyware program AntiAID. Users will only encounter Antiaid.com if they have previously been infected with a stealthy Trojan related to the infection. Antiaid.com presents the fake security tool, AntiAID, as a reliable tool that can remove parasites. Antiaid.com contains misleading information; do not be fooled into purchasing the AntiAID rogueware.
Technical Information
Registry Details
Antiaid.com creates the following registry entry or registry entries:
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “%System%\8enyqcv1.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiAID
HKEY_LOCAL_MACHINE\SOFTWARE\AntiAID
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “%ProgramFiles%\AntiAID Software\AntiAID\AntiAID.exe -min”