Antispy.microsoft.com

Antispy.microsoft.com Description

Antispy.microsoft.com is a browser hijacker promoting the rogue anti-spyware application known as Antivirus System PRO. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Antispy.microsoft.com domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing the fake spyware remover Antivirus System PRO.

Technical Information

File System Details

Antispy.microsoft.com creates the following file(s):
# File Name Detection Count
1 %WINDOWS%\system32\iehelper.dll N/A
2 %WINDOWS%\sysguard.exe N/A

Registry Details

Antispy.microsoft.com creates the following registry entry or registry entries:
RegistryKey
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"