Coantivirus.com
Coantivirus.com also known as Coantivirus.microsoft.com is a malicious domain that advises unsuspecting users to purchase Antivirus System PRO. Users that encounter Coantivirus.com have already been infected with a Trojan that helps distribute the misleading webpage. The Trojan sneakily enters a user's system and modifies the registry and hosts file, causing a victim to be frequently redirected to Coantivirus.com.
Once a victim has hit Coantivirus.com a fake system scan will be conducted. The scan will claim that the victim's computer is seriously infected and then persuade the victim to purchase the "licensed version" of Antivirus System PRO in order to remove the detected malware. Users are advised to ignore all fake security alerts displayed on Coantivirus.com and never purchase the rogueware Antivirus System PRO.
File System Details
# | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
---|---|---|
1. | %WINDOWS%\system32\iehelper.dll | |
2. | %WINDOWS%\sysguard.exe |