Description also known as is a deceitful websites that promotes the purchase of Antivirus Soft. Antivirus Soft is a fake anti-virus application that is not able to detect or remove any type of computer malware. or can be obtained via Trojans that secretly enter a system and insert the website into victims' Hosts files. Once a victim lands on, he/she will be presented with a script that resembles an Internet Explorer warning page. The warning will inform the victim that he/she is about to visit a websites which is unsafe, then the victim will be advised to purchase Antivirus Soft in order to continue safely. The victim will then be directed to which is the payment page for Antivirus Soft. Do not fall for this scam; the above are malicious websites that can be removed with a legitimate security tool.

Technical Information

File System Details creates the following file(s):
# File Name Detection Count
1 %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sysguard.exe N/A

Registry Details creates the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random string]"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random string]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http="