Home Malware Programs Rogue Anti-Spyware Programs My Supervisor 2009

My Supervisor 2009

Posted: March 4, 2009

My Supervisor 2009, also known as MySupervisor 2009 or MySupervisor2009, is a rogue anti-spyware program that may install on your computer with the help of Trojans such as Zlob. You may have also downloaded My Supervisor 2009 from a rogue website thinking it would remove your spyware threats.

Zlob may pop up fake notifications to make you believe that your computer is infected with spyware. These fake notifications may appear harmless because they're designed to look similar to the messages issued by Windows Security Center. Although the makers of My Supervisor 2009 seek to goad you into purchasing My Supervisor 2009, this program should not be trusted. It is reported that My Supervisor 2009 is another version of My Supervisor.

Once My Supervisor 2009's trial version is installed, it will run a fake system scan to generate a list of spyware results that are supposedly found in your system. Along with this scan, popups and fake system alert messages may appear to "inform" you about your supposed infections. If you click on any of these messages, you'll be redirected to MySupervisor2009's rogue website to further download My Supervisor 2009's licensed version.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\2dcb
    2 %Documents and Settings%\All Users\Application Data\2dcb\Data Files
    3 %Documents and Settings%\All Users\Application Data\2dcb\mozcrt19.dll
    4 %Documents and Settings%\All Users\Application Data\2dcb\MSup1bf7.exe
    5 %Documents and Settings%\All Users\Application Data\2dcb\sqlite3.dll
    6 %Documents and Settings%\All Users\Application Data\2dcb\unins000.dat
    7 %Documents and Settings%\All Users\Application Data\2dcb\unins000.exe
    8 %Documents and Settings%\All Users\Application Data\2dcb\working.log
    9 %Documents and Settings%\All Users\Application Data\Data Files
    10 %Documents and Settings%\All Users\Application Data\Data Files\config.cfg
    11 %UserProfile%\Application Data\My Supervisor
    12 %UserProfile%\Application Data\My Supervisor\Autorun.ico
    13 %UserProfile%\Application Data\My Supervisor\Process.ico
    14 %UserProfile%\Application Data\My Supervisor\Service.ico
    15 %UserProfile%\Application Data\My Supervisor\settings.ini
    16 %UserProfile%\Application Data\My Supervisor\uill.ini
    17 %UserProfile%\Desktop\AutorunManager.lnk
    18 %UserProfile%\Desktop\My Supervisor.lnk
    19 %UserProfile%\Desktop\ProcessManager.lnk
    20 %UserProfile%\Desktop\ServiceManager.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Supervisor"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "URWSWR[]"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}My Supervisor_is1
Loading...