Antivirfox.com is the "official" website of Antivir Solution Pro, one of the bogus security application targeted for money making scheme. Antivirfox.com disguises itself from the user and ask them to perform some activity in order to spread infection. It does so with its Antivir Solution Pro program. It produces a lot of alerts and fake security scanners with one purpose to trick you into buying the software.
The major infections starts onto your computer when you click on its scan result in order to remove the malware from your computer. But the truth is that its all scam and there is no infections on your computer. Obviously, you should not trust neither the antivirfox.com website nor its affiliate Antivir Solution Pro program.
If by chance your computer is infected with Antivirfox.com and you want to remove this fake program from your computer then perform the following:
1. Delete "%Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe" file.
2. Delete the below registries:
- HKEY_CURRENT_USER\Software\AvSuite
- HKEY_CURRENT_USER\Software\AVSolution
- HKEY_LOCAL_MACHINE\Software\AvSuite
- HKEY_LOCAL_MACHINE\SOFTWARE\AVSolution
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” =”1″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “{local}”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5643″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random string]“
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random string]“
Bookmarks