Softwaresh.com Description
Softwaresh.com is a website created for malicious deeds such as the promotion and distribution of rogue security software. Antivirus Scan is the rogueware currently being promoted on Softwaresh.com. Users that come across Softwaresh.com may already be infected with Antivirus Scan and this rogue has modified the browser settings. When inside your computer system, Antivirus Scan will display fake security alerts and warnings. These alerts will also redirect a user to Softwaresh.com when clicked on. If you encounter Softwaresh.com avoid clicking on the website and never purchase anything from it. Use a reliable security tool to remove Antivirus Scan from your system and stop the redirections to Softwaresh.com.
Technical Information
File System Details
Softwaresh.com creates the following file(s):
| # | File Name | Detection Count |
|---|---|---|
| 1 | %Temp%\[random]\[random].exe | N/A |
| 2 | %Temp%\[random]\ | N/A |
Registry Details
Softwaresh.com creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:59274'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.exe'