Home Malware Programs Rogue Anti-Virus Programs Software Antivirus

Software Antivirus

Posted: February 11, 2010

Software Antivirus is a fake anti-virus program that uses Trojans and corrupt domains to spread. The Trojan will penetrate the computer by exploiting software vulnerabilities before modifying Internet settings to favor the fraudulent activities of Software Antivirus. Soon the Internet browser will be redirected to fake websites that produce an online virus scan. Then an unwanted program will be installed on the computer to scare users to pay for the Software Antivirus activation key or serial number. Software Antivirus is a complete waste of money and will jeopardize the smooth operation of your PC. Do not fall for this scam and have Software Antivirus and all related threats removed immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Recent\hijackthis.log.lnk
    2 %UserProfile%\Recent\PE.drv
    3 %UserProfile%\Recent\PE.tmp
    4 %UserProfile%\Recent\ppal.exe
    5 %UserProfile%\Recent\runddlkey.drv
    6 %UserProfile%\Recent\tempdoc.tmp
    7 %UserProfile%\Start Menu\Programs\Software Antivirus.lnk
    8 %UserProfile%\Start Menu\Software Antivirus.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Settings\5.0\User Agent\Post Platform "986707143803"HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Software Antivirus"HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\ReleaseXP.DocHostUIHandler

Related Posts

Loading...