Home Malware Programs Rogue Anti-Spyware Programs MS Antivirus 2008

MS Antivirus 2008

Posted: August 21, 2008

Threat Metric

Threat Level: 10/10
Infected PCs: 66
First Seen: July 24, 2009
Last Seen: June 11, 2021
OS(es) Affected: Windows

ScreenshotMS Antivirus 2008, also known as MSAntivirus 2008 and a clone of XP Antivirus 2008, is a rogue anti-spyware program. You may have downloaded MS Antivirus 2008 thinking it would solve your spyware issues, or it may have infected your computer with the help of Trojan Zlob or Vundo usually found bundled with fake video codecs.

Once you're infected with Zlob, it will use aggressive advertising methods to push it's rogue website and sell its product, claiming to be able to clean your computer from spyware. Zlob's deceptive methods include: fake warning alert popups and system notification messages in the Taskbar. The links on the fake warning messages lead to a rogue website where you'll be convinced to download the a trial version of MS Antivirus 2008.

MS Antivirus 2008 is able to emulate a system scan and report a list of supposed infections to scare you and to push you into buying the full MS Antivirus 2008 version. This approach is to lead you to believe that you're infected with a load of spyware, when, in reality, is MS Antivirus 2008 the cause of the spyware. MS Antivirus 2008 is able to emulate a system scan and report a list of supposed infections to scare you and to push you into buying the full MS Antivirus 2008 version. MS Antivirus 2008 may launch on every Windows startup.

ScreenshotScreenshot

Aliases

Trojan-Downloader.Win32.CodecPack (v) [Sunbelt]Mal/EncPk-HW [Sophos]Trojan.LooksLike [McAfee-GW-Edition]Generic Dropper.cx [McAfee]Crypt.EXN [AVG]TROJ_FAKEAV.JD [TrendMicro]Troj/FakeVir-FL [Sophos]FakeAlert-AB [McAfee]not-a-virus:FraudTool.Win32.MSAntivirus.t [Kaspersky]Trojan.Win32.Malware.1 [K7AntiVirus]Adware/FakeAV [Fortinet]ApplicUnwnt.Win32.FraudTool.MSAntivirus.t [Comodo]Adware.FakeAntiVirus.J [BitDefender]Win32:FraudTool-KD [Avast]W32/FakeAV.N [Authentium]
More aliases (87)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to MS Antivirus 2008 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



MSXSetup[1].exe File name: MSXSetup[1].exe
Size: 513.06 KB (513065 bytes)
MD5: 3f8ec7a65e0509e044d18a6cf11e242d
Detection count: 94
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
MSASetup[1].exe File name: MSASetup[1].exe
Size: 1.03 MB (1037918 bytes)
MD5: 1f58d870738aaebb12ed7ece90781c6a
Detection count: 53
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
MSA.cpl File name: MSA.cpl
Size: 167.42 KB (167424 bytes)
MD5: d27c67f9d00201830f4b68288132bf2f
Detection count: 45
Mime Type: unknown/cpl
Group: Malware file
Last Updated: December 11, 2009
msa.exe File name: msa.exe
Size: 143.36 KB (143360 bytes)
MD5: 9ee6f50dd8d7e5c896f1faee13942fd3
Detection count: 43
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
MSXSetup.exe File name: MSXSetup.exe
Size: 671.28 KB (671282 bytes)
MD5: d593ccf1c7439e506f3bfa5c3156da4d
Detection count: 25
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
MSx.exe File name: MSx.exe
Size: 416.25 KB (416256 bytes)
MD5: 2aa2a4dd19f49aae65b2d4800942bea4
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

More files

Registry Modifications

The following newly produced Registry Values are:

Cookiesmsscanner

Additional Information

The following cookies were detected:
msscanner

5 Comments

  • Art says:

    Great stuff. Removed MS Antivirus + some other bad programs. Thanks a lot.

  • ric barbaza says:

    Thank you very much for this information(even though at this point in time the info is relatively higly technical for me to grasp; and, I'm learning). You're doing a great service to us - the general public consumer! More power & acknowledgement to you! Appreciating you, Ric

  • kristen says:

    THANK YOU SO MUCH!!! This is the only thing that helped and SpyHunter3 was the only program that found eveything!!!

  • mary anne says:

    does the system restore thing deletes any data from your computer (such as formatting?) sorry for asking but i better ask bec i need to keep all data and programs i have

  • mike says:

    Does anyone know where this company promoting this malware is located? I would like to contact them.