Description or is a website created by criminals to convince users to purchase the fake security application called Antivirus Scan. Users infected with the trial version of Antivirus Scan will encounter frequently because once the rogue has entered a system it modifies the internet settings resulting in frequent redirections to When a victim attempts to browse other websites, he/she will be presented with an online warning page before getting redirected to Users that click on any of the fake security alerts displayed by Antivirus Scan will also be redirected to Stop the annoying browser redirects by using good security software that can detect and remove both and Antivirus Scan.

Technical Information

File System Details creates the following file(s):
# File Name Detection Count
1 %Temp%\[random]\[random].exe N/A
2 %Temp%\[random]\ N/A

Registry Details creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http="
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"