Description is a deceptive website that assists in the advertising of the fake security application, Alpha Antivirus. Users are redirected to once they have been infected with a Trojan that modifies browser configurations. Once a user has visited a fake scan is conducted followed by exaggerated results of virus infections. Users are then urged to install Alpha Antivirus in order to remove all the purportedly detected threats. cannot be trusted and Alpha Antivirus should be removed immediately.

Technical Information

File System Details creates the following file(s):
# File Name Detection Count
1 %Program Files%\AlphaAV\AlphaAV.exe N/A
2 %WINDOWS%\system32\ndisapi.dll N/A
3 ndisapi.dll N/A
4 %WINDOWS%\system32\NetFilter.exe N/A
5 msnaoladdon.dll N/A
6 %WINDOWS%\system32\msnaoladdon.dll N/A
7 %UserProfile%\Desktop\Alpha Antivirus.lnk N/A
8 %Program Files%\AlphaAV N/A

Registry Details creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Alpha Antivirus”
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “AlphaAV”
HKEY_LOCAL_MACHINE\Software\Alpha Antivirus
HKEY_CURRENT_USER\Software\Alpha Antivirus