Av-force.com
Av-force.com or Av-force.net is a manipulative website that convinces users to purchase the rogueware called Antispyware Soft. Av-force.com can be accessed directly or it can be placed into a user's browser by a Trojan. Once a user lands on Av-force.com a fake system scan will be conducted and the user will be prompted to purchase the "full" version of Antispyware Soft in order to remove the purportedly detected malware.
File System Details
Av-force.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe | |
| 2. | %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe |
Registry Details
Av-force.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random string]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random string]"
HKEY_CURRENT_USER\Software\AvScan
