Threat Database Rogue Websites www.antispyis.com

www.antispyis.com

By LoneStar in Rogue Websites

Www.antispyis.com is an untrustworthy website that helps in the spread of rogue software such as Antivirus Scan. A victim's browser can be hijacked by www.antispyis.com which is the payment page for Antivirus Scan. Www.antispyis.com may also produce a fake online system scan that should not be trusted but ignored as it displays fabricated results. Do not purchase Antivirus Scan and avoid www.antispyis.com. Should you encounter this malicious website, use a legitimate security application to remove both www.antispyis.com and Antivirus Scan from your system.

File System Details

www.antispyis.com creates the following file(s):
# File Name Detections
1. %Temp%\[random]\[random].exe N/A
2. %Temp%\[random]\ N/A

Registry Details

www.antispyis.com creates the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:59274'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.exe'

Trending

Most Viewed

Loading...