Antivirstress.com
Antivirstress.com is a malicious domain used to advertise and distribute the rogue called Antivirus Action. Antivirstress.com is typically encountered by users already infected with the supposed trial version of Antivirus Action. Antivirus Action will display fake security alerts with recommendations to purchase its "full version" to remove the detected malware. Never purchase Antivirus Action and don't trust anything on Antivirstress.com.
File System Details
Antivirstress.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Temp%\[random]\[random]agnz.exe | |
| 2. | %Temp%\[random]\ |
Registry Details
Antivirstress.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1'
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"
