Homecomputertools.net

Homecomputertools.net Description

Homecomputertools.net is a rogue website used to promote the fake security program Antivirus Action. Homecomputertools.net displays pop-up alerts claiming that the system is infected. The alerts will also prompt a user to purchase the "licensed" version of Antivirus Action in order to remove the purportedly detected malware. Do not purchase anything promoted on Homecomputertools.net and have Antivirus Action removed from your system upon detection.

Technical Information

File System Details

Homecomputertools.net creates the following file(s):
# File Name Detection Count
1 %TempDir%\[random]\[random]agnz.exe N/A
2 %TempDir%\[random] N/A

Registry Details

Homecomputertools.net creates the following registry entry or registry entries:
Registry key
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"
HKCU\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKCU\Software\[random]
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"