Description is a browser hijacker promoting the distribution of the rogue anti-spyware application known as Personal Antivirus. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing and downloading the fake spyware remover Personal Antivirus.

Technical Information

File System Details creates the following file(s):
# File Name Detection Count
1 %UserProfile%\Application Data\Personal Antivirus\db N/A
2 c:\Program Files\Personal Antivirus\Languages N/A
3 %UserProfile%\Application Data\Personal Antivirus N/A
4 c:\Program Files\Personal Antivirus\db N/A
5 c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus N/A
6 c:\Program Files\Personal Antivirus N/A

Registry Details creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Personal Antivirus"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS"