Description is a browser hijacker known to collaborate with the notorious rogueware Alpha Antivirus. has the ability to modify the browser configurations of targeted machines, resulting in inconstant hits on its site. Victims are usually directed to, where they are bombarded with alarming displays of system scans and virus alert notifications.

The scans are run by Alpha Antivirus and the fake notifications all part of a ploy to get users to purchase the full version of rogue security software. It is recommended that you remove from your system with a well known anti-spyware program immediately after detection.

Technical Information

File System Details creates the following file(s):
# File Name Detection Count
1 %WINDOWS%\system32\NetFilter.exe N/A
2 %WINDOWS%\system32\msnaoladdon.dll N/A
3 %WINDOWS%\system32\drivers\NDISRD.sys N/A
4 %Program Files%\AlphaAV\AlphaAV.exe N/A
5 %WINDOWS%\system32\ndisapi.dll N/A
6 %UserProfile%\Desktop\Alpha Antivirus.lnk N/A
7 %Program Files%\AlphaAV N/A

Registry Details creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Alpha Antivirus"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "AlphaAV"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Alpha Antivirus
HKEY_LOCAL_MACHINE\Software\Alpha Antivirus
HKEY_CURRENT_USER\Software\Alpha Antivirus