Home Malware Programs Rogue Anti-Spyware Programs AntivirusBEST

AntivirusBEST

Posted: June 29, 2009

Threat Metric

Threat Level: 10/10
Infected PCs: 91
First Seen: July 24, 2009
Last Seen: January 23, 2022
OS(es) Affected: Windows

ScreenshotAntivirusBEST, also known as Antivirus BEST, is a rogue anti-spyware program that installs in your computer system with the help of a Trojan, possibly the popular Trojan Zlob. You may have also downloaded AntivirusBEST from a rogue website, such as Antivirus-Best.com, thinking it would remove your infections.

Zlob may pop up fake notifications to make you believe that your computer is infected with spyware. Antivirus BEST may install a Browser Helper Object that shows the following fake warning: "Internet Explorer has found an unregistered version of AntivirusBEST. To protect your computer, please register your AntivirusBEST."

AntivirusBEST may also pop-up the following fake warning alert:
"AntivirusBEST
Privacy Violation alert!
AntivirusBEST detected a Privacy Violation. A program is
secretly sending your private data to an untrusted internet
host. click here to block this activity by removing the threat
(Recommended)."

These fake warning alerts may appear harmless because they're designed to look similar to the legitimate warning messages issued by your computer. Although the makers of AntivirusBEST seek to goad you into purchasing AntivirusBEST, this program should not be trusted.

If you click on any of the fake warning messages, you'll be redirected to Antivirus BEST's rogue website to further download AntivirusBEST's licensed version. AntivirusBEST is similar to other rogue spyware removers such as Antivirus 2009, and MS Antivirus 2009.

Once AntivirusBEST's trial version is installed, it will run a fake system scan to display a list of spyware results that are allegedly found in your system. Antivirus-Best.com will promote AntivirusBEST as a legit software, do not be tricked by its malicious tactics.

ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Aliases

TROJ_FAKEAV.BBW [TrendMicro]Win32/Adware.AntivirusBest [NOD32]Trojan.Fakealert.afe [McAfee-GW-Edition]potentially unwanted program Artemis!11D33A920CB8 [McAfee+Artemis]not-a-virus:FraudTool.Win32.AntivirusBest.a [Kaspersky]not-a-virus:FraudTool.Win32.AntivirusBest [Ikarus]Misc/AntivirusBest [Fortinet]FraudTool.Win32.AntivirusBest.a [F-Secure]Downloader.Zlob.ANKJ [AVG]Win32:Adware-gen [Avast]W32/FakeAV.LQ [Authentium]TR/Fakealert.afe [AntiVir]Win-Trojan/Fakealert.11345408 [AhnLab-V3]Riskware.FraudTool.Win32.AntivirusBest!IK [a-squared]TROJ_FAKEAV.AKOY [TrendMicro]
More aliases (51)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



Installer.exe File name: Installer.exe
Size: 78.84 KB (78848 bytes)
MD5: 3908ef46a1bd48b2851229455dd8add2
Detection count: 36
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\PreInstaller.exe File name: PreInstaller.exe
Size: 227.32 KB (227328 bytes)
MD5: eba5ca538be5b69f59f4de9ae8a21f5f
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\PreInstaller.exe
Group: Malware file
Last Updated: January 23, 2022

Additional Information

The following messages's were detected:
# Message
1AntivirusBEST
Internal conflict alert.
AntivirusBEST detected internal software conflict. Some application tries to get access to system kernel (such behavior is typical to Spyware/Malware). It may cause crash of your computer.
2AntivirusBEST
Privacy Violation alert!
AntivirusBEST detected a Privacy Violation. A program is
secretly sending your private data to an untrusted internet
host. click here to block this activity by removing the threat
(Recommended).
3AntivirusBEST
System files modification alert!
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss. Click here to block unathorised modifications by removing threats (Recommended).
4Your PC is not protected
Security center reports that 'AntivirusBEST' is inactive. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the suggested actions. You system might be at risk now.

One Comment

  • Brandon Adesso says:

    Okay NONE of this is helping me! Everything and I mean EVERYTHING is blocked on my computer. Even using run doesnt work. It took me forever for it to let me transfer my files on a flash drive. I've had all this destroy malware stuff for ages cause I've gotten anti virus before. but it was pro not soft. Any ways nothing works!! I need help!! I can't do ANYTHING! My task manager is not longer working but even when it did I couldn't find the file you listed! Ahhh!

Loading...