Threat Database Rogue Websites Homecomputertools.net

Homecomputertools.net

Homecomputertools.net is a rogue website used to promote the fake security program Antivirus Action. Homecomputertools.net displays pop-up alerts claiming that the system is infected. The alerts will also prompt a user to purchase the "licensed" version of Antivirus Action in order to remove the purportedly detected malware. Do not purchase anything promoted on Homecomputertools.net and have Antivirus Action removed from your system upon detection.

File System Details

Homecomputertools.net may create the following file(s):
# File Name Detections
1. %TempDir%\[random]\[random]agnz.exe
2. %TempDir%\[random]

Registry Details

Homecomputertools.net may create the following registry entry or registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"
HKCU\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKCU\Software\[random]
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "[random]agnz.exe"

Trending

Most Viewed

Loading...