Aviraprotect.com

By ZulaZuza in Browser Hijackers

Aviraprotect.com is a malicious browser hijaker which is a supporter of a fake anti-spyware program Antivirus Protection Trial. Aviraprotect.com gives you falsified information about Antivirus Protection Trial being a superb anti-virus. If your computer has been corrupted with fictitious security software Antivirus Protection Trial, you will be constantly redirected to Aviraprotect.com each time you type in a random URL address, in the address field of your browser. Aviraprotect.com is able to monitor the activity of your web browser on the computer it invades. Aviraprotect.com attracts targeted users to unknowingly accomplish malicious actions on a corrupted computer system.

File System Details

Aviraprotect.com may create the following file(s):
# File Name Detections
1. %Temp%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe
2. %Temp%\[RANDOM CHARACTERS]\

Registry Details

Aviraprotect.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = '127.0.0.1:33554'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"
HKEY_CURRENT_USER\Software\[RANDOM CHARACTERS]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ''
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.exe'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'

Trending

Most Viewed

Loading...