Antispytag.net

Antispytag.net Description

Antispytag.com is a criminal website created to trick users into paying for the useless Antivirus Action application. Users infected with the trial version of Antivirus Action will frequently encounter Antispytag.com because the rogueware will modify the browser settings. The fake security notifications displayed by Antivirus Action will also redirect a victim to Antispytag.com once clicked on. Avoid Antispytag.com at all costs.

Technical Information

File System Details

Antispytag.net creates the following file(s):
# File Name Detection Count
1 %Temp%\[random]\[random]agnz.exe N/A
2 %Temp%\[random]\ N/A

Registry Details

Antispytag.net creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"