Home Malware Programs Rogue Anti-Spyware Programs Virus.DOS.RogueAntiSpyware

Virus.DOS.RogueAntiSpyware

Posted: February 7, 2011

Threat Metric

Threat Level: 10/10
Infected PCs: 1,134
First Seen: June 17, 2010
Last Seen: February 18, 2023
OS(es) Affected: Windows

The Virus.DOS.Rogueantispyware is a Trojan horse infection that may steal your personal information or serve as a precursor to rogue software infiltration. Since Virus.DOS.Rogueantispyware attempts to infect computers secretly, you may not notice it until you start seeing the symptoms. Once there are obvious signs of Virus.DOS.Rogueantispyware on your computer, you should take every possible step to eradicate this virus. Just having Virus.DOS.Rogueantispyware on your computer will compromise your privacy, and it may damage your system as well.
 
This Trojan is also known by the popular alternate names of Trojan.Win32.Tdss.beea, Trojan:Win32/Alureon.gen!J, and DNSChanger.bu. Virus.DOS.Rogueantispyware has been on the scene for long enough that one needn't have the most updated security software to catch it. However, an up-to-date security product is recommended in any case, just to catch possible related infections. Virus.DOS.Rogueantispyware sometimes has buddies tagging along for the ride!

The Dangerous Symptoms of Virus.DOS.Rogueantispyware

Virus.DOS.Rogueantispyware may serve as a delivery mechanism for rogue malware. These rogues will pretend to be true anti-malware software when their scans do nothing, their error messages are erroneous, and their full version is only designed to steal money from the gullible. If you see pop-ups or apparent system error messages extolling the virtues of a particular scanner, avoid taking them at their word! Clicking on these and installing the rogue program recommended will only damage your system further. Remember that genuine error messages from your operating system will not link you to a purchasable product.
 
Your system may be altered in various ways, as Virus.DOS.Rogueantispyware seeks to download other malware and cause panic. All this is usually used to support rogue scams, which lure the user into believing that illegitimate purchasable security software has worth, causing credit cards and other financial information to be compromised. Virus.DOS.Rogueantispyware's actions are made obvious by a general slowdown of your system, files being created and removed without any readily apparent cause, and various settings being altered.

The True Threat and What You Should Do About It

Although most of Virus.DOS.Rogueantispyware's symptoms are unpleasant and damaging they aren't immediately fatal to the state of the computer. The worst Virus.DOS.Rogueantispyware can do is far worse than that, though. Virus.DOS.Rogueantispyware most invasive attack on your system is to serve as spyware. Virus.DOS.Rogueantispyware can steal information such as passwords, and along with this information, it can potentially seize your money and identity. This is the aspect of Virus.DOS.Rogueantispyware that truly rockets it up to top priority for removal, beyond less threatening malware that is content to be just a nuisance.
 
With deleting Virus.DOS.Rogueantispyware as your foremost goal, you should be able to succeed by using the standard anti-malware solutions. This may require using multiple scanning products to catch all the permutations of the infection, or using Windows Search to find all the relevant files to delete. For your sake, consider all information on your system insecure until the infection has been destroyed, or you may end up regretting it.

Aliases

Trojan.FakeAV!gen39 [Symantec]W32/FakeAlert.HX.gen!Eldorado [F-Prot]FakeAlert-SecurityTool.i [McAfee]Trojan-Downloader.Win32.Mufanom [Ikarus]Trojan.Win32.Hiloti.gen.f (v) [Sunbelt]Mal/Hiloti-D [Sophos]Trojan-Downloader.Win32.Mufanom.aafz [Kaspersky]Win32:Hilot [Avast]W32/Hiloti.I.gen!Eldorado [F-Prot]a variant of Win32/Cimag.DC [NOD32]Hiloti.gen.e [McAfee]Trojan.Packed.21137 [DrWeb]a variant of Win32/Kryptik.HQD [NOD32]VirTool.Win32.Obfuscator.ah!e (v) [Sunbelt]SecurityToolFraud!Gen4 [Symantec]
More aliases (86)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\Defense Center\defcnt.exe File name: defcnt.exe
Size: 1.66 MB (1661952 bytes)
MD5: 11ea668acbcde94ce69dbd3b9ee578ca
Detection count: 251
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Defense Center
Group: Malware file
Last Updated: June 17, 2010
%PROGRAMFILES%\Defense Center\defcnt.exe File name: defcnt.exe
Size: 1.66 MB (1661952 bytes)
MD5: a95737643a2fe963f07d942e36fc341a
Detection count: 201
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Defense Center
Group: Malware file
Last Updated: October 27, 2010
%APPDATA%\Defense Center\defcnt.exe File name: defcnt.exe
Size: 1.66 MB (1661952 bytes)
MD5: 2735a9e7bdd45c3818dbad953d96a941
Detection count: 171
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Defense Center
Group: Malware file
Last Updated: June 17, 2010
%APPDATA%\Defense Center\defcnt.exe File name: defcnt.exe
Size: 1.66 MB (1661952 bytes)
MD5: bc4995c1afc9fa0c70b1c91c73de66d3
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Defense Center
Group: Malware file
Last Updated: June 17, 2010
%PROGRAMFILES%\Defense Center\defcnt.exe File name: defcnt.exe
Size: 1.66 MB (1661952 bytes)
MD5: 221fdf14fd5bad8d2240c2095fdadedd
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Defense Center
Group: Malware file
Last Updated: June 17, 2010
%PROGRAMFILES%\Defense Center\defcnt.exe File name: defcnt.exe
Size: 1.66 MB (1661952 bytes)
MD5: 82e1fab67f596ef433e692f95835abd5
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Defense Center
Group: Malware file
Last Updated: June 17, 2010
%PROGRAMFILES%\Defense Center\defcnt.exe File name: defcnt.exe
Size: 1.66 MB (1661952 bytes)
MD5: 8b353f4f257ff79532f9d71dcfa46fcd
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Defense Center
Group: Malware file
Last Updated: June 17, 2010
%PROGRAMFILES%\Defense Center\defcnt.exe File name: defcnt.exe
Size: 1.66 MB (1661952 bytes)
MD5: d4c39e90c195c2352e101fcf0bc1d27b
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Defense Center
Group: Malware file
Last Updated: June 17, 2010
%TEMP%\mschrt20ex.dll File name: mschrt20ex.dll
Size: 301.56 KB (301568 bytes)
MD5: 57b453403e62b43ae880b9e280825923
Detection count: 15
File type: Dynamic link library
Mime Type: unknown/dll
Path: %TEMP%
Group: Malware file
Last Updated: June 29, 2010
%TEMP%\esentutl64.exe File name: esentutl64.exe
Size: 418.3 KB (418304 bytes)
MD5: e16da8bb88cae88fe72f8969a43e745b
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: June 29, 2010
%TEMP%\Bf3.exe File name: Bf3.exe
Size: 169.47 KB (169472 bytes)
MD5: d1a06ac9249d9c2554358d0fb5b4d965
Detection count: 11
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: June 29, 2010
%WINDIR%\system32\sshnas21.dll File name: sshnas21.dll
Size: 216.06 KB (216064 bytes)
MD5: 70bd4a85f5a25e0f46900e213884e565
Detection count: 10
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: June 29, 2010
%TEMP%\wscsvc32.exe File name: wscsvc32.exe
Size: 220.16 KB (220160 bytes)
MD5: 657bd95834e67585b275cd8be7af0e99
Detection count: 0
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: June 29, 2010

Registry Modifications

The following newly produced Registry Values are:

File name without pathDefense Center.lnk

Additional Information

The following directories were created:
%APPDATA%\Defense Center%ProgramFiles%\Defense Center
Loading...