AntivirSolution

AntivirSolution Description

AntivirSolution aka Antivir Solution is a rogue anti-virus from the same family as Antivir Solution Pro. On infiltrating a system, AntivirSolution will fabricate numerous security alerts and warnings in order to scare a victim into purchasing it as a remedy. Antivir Solution may also redirect a victim's browser to malicious websites that further promote the rogueware. AntivirSolution is a useless application that can neither detect nor remove legitimate computer threats.

Technical Information

File System Details

AntivirSolution creates the following file(s):
Expand All | Collapse All
# File Name Detection Count
1 HKEY_LOCAL_MACHINE\SOFTWARE\AVSolution N/A
2 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "" N/A
3 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "" N/A
4 HKEY_CURRENT_USER\Software\AVSuitE N/A
5 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0" N/A
6 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1" N/A
7 HKEY_CURRENT_USER\Software\AVSolution N/A
8 HKEY_LOCAL_MACHINE\SOFTWARE\AVSuitE N/A
9 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5643" N/A
10 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "" N/A

Registry Details

AntivirSolution creates the following registry entry or registry entries:
Registry key
[HKEY_CLASSES_ROOT\.exe\shell\open\command]
[-HKEY_CLASSES_ROOT\secfile]
[HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
"Content Type"="application/x-msdownload"
[HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\.exe]@="exefile"
By LoneStar in Rogue Anti-Virus Program
Translate To:
English