Rogue software details: A-fast Antivirus

A-fast Antivirus is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\Desktop\A-fast Antivirus.lnk

Folders
c:\ProgramFiles\A-fast

Registry entries
Key: HKEY_CURRENT_USER\Software\A-fast
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Policies\System
Value: DosableTaskMgr
Data: 01, 00, 00, 00
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run
Value: fast
Data: C:\Program Files\A-fast\A-fast.exe
Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\
SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
Value: C:\Program Files\A-fast\A-fast.exe
Data: C:\Program Files\A-fast\A-fast.exe:*:Enabled:afast
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
Value: C:\Program Files\A-fast\A-fast.exe
Data: C:\Program Files\A-fast\A-fast.exe:*:Enabled:afast

Source: Lavasoft Malware Lab’s Rogue Gallery.

Don't miss