Home Malware Programs Rogue Anti-Spyware Programs WinAntiVir

WinAntiVir

Posted: July 28, 2008

WinAntiVir, also known as Win AntiVir or Win Antivir 2008, is a rogue anti-spyware program and part of the XP Antivirus and WinAntivirusPro family. WinAntiVir was created to trick users to purchase its full version to supposedly remove spyware threats. WinAntiVir may install in your computer, with the aid of a Trojan called Zlob which is most commonly found on fake video codec downloads. As soon as you're infected with Zlob, it may flood your system with popups and fake warning alerts stating that your computer is infected with spyware. WinAntiVir may use its system scanner to emulate a scan and report a rogue list of spyware infections as a result.

Do not click on any links provided by Win AntiVir, they will most likely redirect you to WinAntiVir's website to further purchase the full WinAntiVir program. WinAntiVir is a scam and should be treated as so.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 Antvrs.exe
    2 Uninstall Antivirus.lnk
    3 Win Antivir 2008.exe
    4 WinAntiVir.exe
    5 WinAntiVir.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\AntivirusHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Antivirus" = "%ProgramFiles%\WinAntiVir\Antvrs.exe"HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus

Related Posts

Loading...