HT Logs. Tips, FAQs, Analyze.

antispywareblock.net is a malicious website

The site was created to spread Antispyware Soft. If your browser is redirected to antispywareblock.net, then you should immediately check your PC using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 193.33.115.92
Site addess: antispywareblock.net
Description: antispywareblock.net is not related with legit security company and can only be seen on infected computers. The site used to promote the rogue antispyware program called Antispyware Soft.

How to remove: use these Antispyware Soft removal instructions in order to remove this infection.

A-fast.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: A-fast
Filename: A-fast.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | fast

Command: C:\Program Files\A-fast\A-fast.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [fast] C:\Program Files\A-fast\A-fast.exe

DDS Line:

uRun: [fast] C:\Program Files\A-fast\A-fast.exe

Combofix/RSIT Line:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“fast”=C:\Program Files\A-fast\A-fast.exe

Description: core component of A-fast Antivirus. A-fast Antivirus is a rogue antispyware program.

How to remove: use these A-fast Antivirus removal instructions.

sys-defender.net is a malicious website

The site was created to spread Antispyware Soft. If your browser is redirected to sys-defender.net, then you should immediately check your PC using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 193.33.115.92
Site addess: sys-defender.net
Description: sys-defender.net is not related with legitimate security company and can only be seen on infected computers. The site used to promote the rogue antispyware program called Antispyware Soft.

How to remove: use these Antispyware Soft removal instructions in order to remove this infection.

av-force.net is a malicious website

The site was created to spread Antispyware Soft. If your browser is redirected to av-force.net, then you should immediately check your PC using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 193.33.115.92
Site addess: av-force.net
Description: av-force.net is not related with legit security company and can only be seen on infected computers. The site used to promote the rogue antispyware program called Antispyware Soft.

How to remove: use these Antispyware Soft removal instructions in order to remove this infection.

AKM Antivirus 2010 Pro.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: AKM Antivirus 2010 Pro
Filename: AKM Antivirus 2010 Pro.exe
Description: core component of AKM Antivirus 2010 Pro. AKM Antivirus 2010 Pro is a rogue antispyware program.

How to remove: use these AKM Antivirus 2010 Pro removal instructions.

QZAIB7KITK is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: {random}
Filename: {random}.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | QZAIB7KITK

Command: %Temp%\{random}.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [QZAIB7KITK] C:\DOCUME~1\user\LOCALS~1\Temp\Qfn.exe

DDS Line:

uRun: [QZAIB7KITK] C:\DOCUME~1\user\LOCALS~1\Temp\Qfn.exe

Combofix/RSIT Line:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“QZAIB7KITK”=C:\DOCUME~1\user\LOCALS~1\Temp\Qfn.exe

Description: a trojan that also known as Mal/FakeAV-CX [Sophos], TrojanDownloader:Win32/Renos.KF [Microsoft], Trojan-Downloader.Win32.Renos [Ikarus], Win-Trojan/Fakeav.164352.AL [AhnLab]

How to remove: use HijackThis + Malwarebytes` Anti-malware

antivrsystem.com is a malicious website

The site was created to spread Antispyware Soft. If your browser is redirected to antivrsystem.com, then you should immediately check your PC using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 79.135.152.155
Site addess: antivrsystem.com
Description: antivrsystem.com is not related with legit security company and can only be seen on infected computers. The site used to promote the rogue antispyware program called Antispyware Soft.

How to remove: use these Antispyware Soft removal instructions in order to remove this infection.

Antivirusexpertsoft.com is a malicious website

The site was created to spread Antispyware Soft. If your browser is redirected to Antivirusexpertsoft.com, then you should immediately check your PC using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 79.135.152.8
Site addess: Antivirusexpertsoft.com
Description: Antivirusexpertsoft.com is not related with legitimate security company and can only be seen on infected computers. The site used to promote the rogue antispyware program called Antispyware Soft.

How to remove: use these Antispyware Soft removal instructions in order to remove this infection.

sysmon64x.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: sysmon64x
Filename: sysmon64x.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | sysmon64x.exe

Command: %Temp%\sysmon64x.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [sysmon64x.exe] C:\DOCUME~1\user\LOCALS~1\Temp\sysmon64x.exe

DDS Line:

uRun: [sysmon64x.exe] C:\DOCUME~1\user\LOCALS~1\Temp\sysmon64x.exe

Combofix/RSIT Line:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“sysmon64x.exe”=C:\DOCUME~1\user\LOCALS~1\Temp\sysmon64x.exe

Description: trojan FakeAlert that installed with Digital Protection. Digital Protection is a rogue antispyware program.

How to remove: use these Digital Protection removal instructions.

antispyware-system.com is a malicious website

The site was created to spread Antispyware Soft. If your browser is redirected to antispyware-system.com, then you should immediately check your PC using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 79.135.152.155
Site addess: antispyware-system.com
Description: antispyware-system.com is not related with legitimate company and can only be seen on infected computers. The site used to promote the rogue antispyware program called Antispyware Soft.

How to remove: use these Antispyware Soft removal instructions in order to remove this infection.