Antispyis.com – hijacker of Antivirus Scan

We would like to warn you of Antispyis.com . Bear in mind that this is a new hijacker of Antivirus Scan rogue. And so this site comes up in your browser window when your PC is infected with Antivirus Scan malware. This virus (fake anti-virus) has the only goal – to convince you that it has detected malware on your system. It does this by showing fake scan results and popups fooling you with stories about spyware, badware, viruses detected on your system, and then aiming to make you buy its full version to get this fake anti-virus tool.


Antivirus Scan Hijacker

Antivirus Scan Hijacker

Antispyis.com aids a lot in this malicious goal. It performs the main redirection job due to malware infiltration. This occurs when you click on alerts or scan reports given by Antivirus Scan rogue. At its purchase web-page you will be suggested to register one of the versions of Antivirus Scan (either Lite, Standard or Ultimate ones).
Afterwards Antispyis.com (Antivirus Scan rogue) will demand from you to pay for it. Do not let this virus trick you in such a manner. Delete Antispyis.com hijacker at once if you happen to see signs of its activity on your workstation. Also, you should remove Antivirus Scan rogue anti-spyware which is most probably on your PC too. Please follow the recommendation provided below.

Antivirus Scan pop-ups manual removal guide:

Delete Antivirus Scan pop-ups files:
%Temp%\[random]
%Temp%\[random]\[random].exe
Delete Antivirus Scan pop-ups registry entries:
HKCU\Software\[random]
HKCU\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1′
HKCU\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:59274″
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
HKCU\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
HKCU\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”

Leave a comment

*