Winwarepro.com

Winwarepro.com is an untrustworthy webpage that maladvertises the fake security application Antivirus System PRO. A Trojan helps Winwarepro.com spread by infecting users' systems and modifying their hosts files to redirect them to Winwarepro.com. Winwarepro.com is a bogus warning page that informs victims that they have been browsing dangerous web sites. The fake warning is simply there to trick victims into purchasing Antivirus System PRO.
Users are advised to use a reliable anti-spyware program to locate and remove the Trojan behind Winwarepro.com.

File System Details

Winwarepro.com creates the following file(s):
# File Name Detections
1. %ProgramFiles%\Antivirus System PRO\uninstall.exe N/A
2. c:\WINDOWS\sysguard.exe N/A
3. %ProgramFiles%\Antivirus System PRO\Antivirussystempro.exe N/A

Registry Details

Winwarepro.com creates the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "ieModule"
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
HKEY_CURRENT_USER\Software\AvScan
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Antivirus System PRO"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}

Trending

Most Viewed

Loading...