Multi-Device Licenses (Volume Discounts)

Change Region

English Español Português
Threat Database Browser Hijackers Softwareanti.net

Softwareanti.net

By Sumo3000 in Browser Hijackers
Translate To:
English

Softwareanti.net is an untrustworthy domain that is involved in the promotion and distribution of Ghost Antivirus. A Trojan in cahoots with Softwareanti.net would first have to infect your system in order for you to encounter the website. The Trojan will modify the Hosts file, resulting in your browser being constantly redirect to Softwareanti.net. Once you have hit Softwareanti.net a fake scan will be run on your system followed by bogus security alerts and pop-up windows all promoting the purchase of Ghost Antivirus. Users should ignore all notifications or scan reports displayed by Ghost Antivirus; it is not a legitimate security tool.

File System Details

Softwareanti.net may create the following file(s):
Expand All | Collapse All
# File Name Detections
1. %WINDOWS%\system32\[random].dll
2. %Program Files%\Ghost Antivirus\lib\WMILib.dll
3. %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
4. %Program Files%\Ghost Antivirus\GhostAV.exe
5. %UserProfile%\Application Data\Ghost Antivirus\unins000.exe
6. %Program Files%\Ghost Antivirus\unins000.dat
7. %Program Files%\Ghost Antivirus\working.log
8. %Program Files%\Ghost Antivirus\lib\ghost.sql
9. %Program Files%\Ghost Antivirus\lib\version.db
10. %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus Home Page.lnk
11. %UserProfile%\Application Data\Ghost Antivirus\
12. %UserProfile%\Application Data\Ghost Antivirus\Uninstall Ghost Antivirus.lnk
13. %UserProfile%\Application Data\Ghost Antivirus\lib\properties
14. %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
15. %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
16. %Program Files%\Ghost Antivirus\register.ico
17. %Program Files%\Ghost Antivirus\web.ico
18. %Program Files%\Ghost Antivirus\lib\
19. %Program Files%\Ghost Antivirus\lib\listing.cfg
20. %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\
21. %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Purchase License.lnk
22. %UserProfile%\Application Data\Ghost Antivirus\uill.ini
23. %UserProfile%\Application Data\Ghost Antivirus\lib\links.txt
24. %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Ghost Antivirus.lnk
25. %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
26. %Program Files%\Ghost Antivirus\
27. %Program Files%\Ghost Antivirus\uninst.ico
28. %Program Files%\Ghost Antivirus\Languages\
29. %Program Files%\Ghost Antivirus\lib\Infected.wav
30. %Documents and Settings%\All Users\Desktop\Ghost Antivirus.lnk
31. %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus.lnk
32. %UserProfile%\Application Data\Ghost Antivirus\settings.ini
33. %UserProfile%\Application Data\Ghost Antivirus\lib\
34. %UserProfile%\Application Data\Ghost Antivirus\lib\times.conf
35. %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
36. [random path]\[random]onin.ex

Registry Details

Softwareanti.net may create the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
HKEY_CURRENT_USER\Software\Microsoft\FTP "SearchDir" = "c:\program files\Ghost Antivirus\"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent

Trending

Most Viewed

Loading...