By SpideyMan in Browser Hijackers Image is a site that you should not visit for any reason, if you can avoid it. (Likewise, you should not visit's identical twin, is a website that promotes and claims to sell the rogue anti-virus application Antivirus Protection, which is also referred to as Antivirus Protection Trial. Antivirus Protection is a fraud, and is a site that supports the Antivirus Protection scam.

The Hijacker

Aside from the website, there is also a browser hijacker that causes the web browser of the infected PC to redirect to that site. So the hijacker is typically referred to simply as, which can be a bit confusing. The hijacker may infect a PC on its own, in order to try to get you to download Antivirus Protection, or it may be part of an Antivirus Protection infection, which usually includes the symptom of browser hijacking. Either way, if you find that your browser is taking you to on its own, or you can't visit any sites other than, then your system is infected with malware. Also, whether you have the hijacker or the full Antivirus Protection infecting your PC, the mode of infection is usually a Trojan hidden in something harmless-looking that you download. Drive-by downloads or malicious advertisements may also cause infection with the hijacker

The Website

The website is nothing special, because is a direct copy of literally every other site that promotes Antivirus Protection. Even the Antivirus Protection sites as a group are nothing original, because their text content is identical or nearly identical to other malicious websites that promote other fake security programs, such as Antivirus Soft. In fact, and the other Antivirus Protection sites use the same phony product box image as the Antivirus Soft sites, and it hasn't even been modified, because it still says "Antivirus Soft!" Matching this lazy reuse of tired old fake content are's completely bogus company information and address, worthless email customer support form, fake customer testimonials, and fluffy, space-filler virus terminology definitions. is set up in such a way that holds itself out to be the one and only site for the "company" selling Antivirus Protection, which is laughable considering that every fake site that promotes Antivirus Protection does the same thing.

At present, is located at IP address, which traces back to Lithuania – a complete mismatch with the address given on the site for the company that supposedly publishes Antivirus Protection. Furthermore, despite the fact that claims to offer software that has a history of success worldwide, the site was only registered on April 18, 2011. There simply is nothing about that can stand up to scrutiny. The site is not trustworthy, and you should not purchase what offers, because you will not get anything for your money.Screenshot

Author of :

  • Antivirus Protection, Inc.

File System Details may create the following file(s):
# File Name Detections

Registry Details may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http='
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'


Most Viewed