Av-force.com

Av-force.com Description

Av-force.com or Av-force.net is a manipulative website that convinces users to purchase the rogueware called Antispyware Soft. Av-force.com can be accessed directly or it can be placed into a user's browser by a Trojan. Once a user lands on Av-force.com a fake system scan will be conducted and the user will be prompted to purchase the "full" version of Antispyware Soft in order to remove the purportedly detected malware.

Technical Information

File System Details

Av-force.com creates the following file(s):
# File Name Detection Count
1 %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe N/A
2 %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe N/A

Registry Details

Av-force.com creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random string]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random string]"
HKEY_CURRENT_USER\Software\AvScan