Sunday, April 11, 2010

AV-product.com


The "av-product.com" website
Av-product.com aka the AV Product website is a rogue antivirus protection software site that promotes Antivirus Suite.

AV-product.com malware promotes a fake antivirus
It is already known that this antivirus suite and its bogus company antivirus suite, inc. promoted by the avproduct.com virus are a hoax. Fake antiviruses are characterized by bogus system scans, constant popups and browser hijacking, which may explain why the av product virus always redirect you to the malicious http://Av-product.com site. Similar other malwares that hijack browsers include the av-armor and the av fortress virus.

Do not even think about spending money for the license key that the AV product malware may offer you. The rogue antivirus protection software that the av-product.com hijacker offers will not get rid of viruses, trojans and other malwares in your computer.

AV-product virus removal: How to get rid of av-product.com hijacker
Remove the following av-product.com virus files and registry entries:


* %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sysguard.exe
* %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]ftav.exe
* %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe

* HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
* HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1?
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555?
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1?
* HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1?
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”[random string].exe”
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”[random string].exe”


You may also want to read this post on how to get rid of av product Antivirus suite virus.
a day

0 comments:

 
design by suckmylolly.com