Home Malware Programs Fake Warning Messages Resident Shield: New virus detected

Resident Shield: New virus detected

Posted: March 31, 2010

Resident Shield: New virus detected is a fake parasite detection alert related to Antivirus 7 fake anti-spyware. Resident Shield: New virus detected is a message designed to make you believe you are infected with spyware. Resident Shield: New virus detected will try to trick you and push you into purchasing Antivirus 7. If you click on the message, you will most likely be redirected to Antivirus 7's corrupt website. You need to remove the Trojan that is generating this fake warning message immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Start Menu\AV7
    2 %Documents and Settings%\All Users\Start Menu\AV7\Antivirus7.lnk
    3 %Documents and Settings%\All Users\Start Menu\AV7\Uninstall.lnk
    4 %Program Files%\AV7
    5 %Program Files%\AV7\antivirus7.exe
    6 %UserProfile%\Desktop\Antivirus7.lnk
    7 %WINDOWS%\SoftwareDistribution\DataStore\Logs\tmp.edb
    8 %WINDOWS%\system32\UpdateExplorer.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\EVA246HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post PlatformHKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\CLSID\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}

Additional Information on Resident Shield: New virus detected

  • The following messages's were detected:
    # Message
    1 Resident Shield: New virus detected
    Warning! New virus detected
    Please click “Remove All” button to heal all infected files and protect your PC
Loading...