Winwarepro.com
Winwarepro.com is an untrustworthy webpage that maladvertises the fake security application Antivirus System PRO. A Trojan helps Winwarepro.com spread by infecting users' systems and modifying their hosts files to redirect them to Winwarepro.com. Winwarepro.com is a bogus warning page that informs victims that they have been browsing dangerous web sites. The fake warning is simply there to trick victims into purchasing Antivirus System PRO.
Users are advised to use a reliable anti-spyware program to locate and remove the Trojan behind Winwarepro.com.
File System Details
Winwarepro.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %ProgramFiles%\Antivirus System PRO\uninstall.exe | |
| 2. | c:\WINDOWS\sysguard.exe | |
| 3. | %ProgramFiles%\Antivirus System PRO\Antivirussystempro.exe |
Registry Details
Winwarepro.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "ieModule"
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
HKEY_CURRENT_USER\Software\AvScan
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Antivirus System PRO"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
