AntivirSolution Description
AntivirSolution aka Antivir Solution is a rogue anti-virus from the same family as Antivir Solution Pro. On infiltrating a system, AntivirSolution will fabricate numerous security alerts and warnings in order to scare a victim into purchasing it as a remedy. Antivir Solution may also redirect a victim's browser to malicious websites that further promote the rogueware. AntivirSolution is a useless application that can neither detect nor remove legitimate computer threats.
Technical Information
File System Details
AntivirSolution creates the following file(s):
# | File Name | Detection Count |
---|---|---|
1 | HKEY_LOCAL_MACHINE\SOFTWARE\AVSolution | N/A |
2 | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "" | N/A |
3 | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "" | N/A |
4 | HKEY_CURRENT_USER\Software\AVSuitE | N/A |
5 | HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0" | N/A |
6 | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1" | N/A |
7 | HKEY_CURRENT_USER\Software\AVSolution | N/A |
8 | HKEY_LOCAL_MACHINE\SOFTWARE\AVSuitE | N/A |
9 | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5643" | N/A |
10 | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "" | N/A |
Registry Details
AntivirSolution creates the following registry entry or registry entries:
Registry key
[HKEY_CLASSES_ROOT\.exe\shell\open\command]
[-HKEY_CLASSES_ROOT\secfile]
[HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
"Content Type"="application/x-msdownload"
[HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\.exe]@="exefile"