Home Malware Programs Rogue Anti-Spyware Programs MS Antivirus 2008

MS Antivirus 2008

Posted: August 21, 2008

Threat Metric

Threat Level: 10/10
Infected PCs: 108
First Seen: July 24, 2009
Last Seen: January 23, 2022
OS(es) Affected: Windows

ScreenshotMS Antivirus 2008, also known as MSAntivirus 2008 and a clone of XP Antivirus 2008, is a rogue anti-spyware program. You may have downloaded MS Antivirus 2008 thinking it would solve your spyware issues, or it may have infected your computer with the help of Trojan Zlob or Vundo usually found bundled with fake video codecs.

Once you're infected with Zlob, it will use aggressive advertising methods to push it's rogue website and sell its product, claiming to be able to clean your computer from spyware. Zlob's deceptive methods include: fake warning alert popups and system notification messages in the Taskbar. The links on the fake warning messages lead to a rogue website where you'll be convinced to download the a trial version of MS Antivirus 2008.

MS Antivirus 2008 is able to emulate a system scan and report a list of supposed infections to scare you and to push you into buying the full MS Antivirus 2008 version. This approach is to lead you to believe that you're infected with a load of spyware, when, in reality, is MS Antivirus 2008 the cause of the spyware. MS Antivirus 2008 is able to emulate a system scan and report a list of supposed infections to scare you and to push you into buying the full MS Antivirus 2008 version. MS Antivirus 2008 may launch on every Windows startup.

ScreenshotScreenshot

Aliases

Trojan-Downloader.Win32.CodecPack (v) [Sunbelt]Mal/EncPk-HW [Sophos]Trojan.LooksLike [McAfee-GW-Edition]Generic Dropper.cx [McAfee]Crypt.EXN [AVG]TROJ_FAKEAV.JD [TrendMicro]Troj/FakeVir-FL [Sophos]FakeAlert-AB [McAfee]not-a-virus:FraudTool.Win32.MSAntivirus.t [Kaspersky]Trojan.Win32.Malware.1 [K7AntiVirus]Adware/FakeAV [Fortinet]ApplicUnwnt.Win32.FraudTool.MSAntivirus.t [Comodo]Adware.FakeAntiVirus.J [BitDefender]Win32:FraudTool-KD [Avast]W32/FakeAV.N [Authentium]
More aliases (87)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



MSXSetup[1].exe File name: MSXSetup[1].exe
Size: 513.06 KB (513065 bytes)
MD5: 3f8ec7a65e0509e044d18a6cf11e242d
Detection count: 94
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
MSA.cpl File name: MSA.cpl
Size: 167.42 KB (167424 bytes)
MD5: d27c67f9d00201830f4b68288132bf2f
Detection count: 45
Mime Type: unknown/cpl
Group: Malware file
Last Updated: December 11, 2009
msa.exe File name: msa.exe
Size: 156.67 KB (156672 bytes)
MD5: ef5765b5b5a67e92520e3f53fdc0decb
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 1, 2010
C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\MSAntivirusInstaller.exe File name: MSAntivirusInstaller.exe
Size: 407.55 KB (407552 bytes)
MD5: 129501043ec966c3a40cae111bdf9370
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\MSAntivirusInstaller.exe
Group: Malware file
Last Updated: January 23, 2022
C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\MSAntivirus2008Installer.exe File name: MSAntivirus2008Installer.exe
Size: 396.8 KB (396800 bytes)
MD5: f238730484c505874683602c1d5a1482
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\MSAntivirus2008Installer.exe
Group: Malware file
Last Updated: January 23, 2022
MSXSetup.exe File name: MSXSetup.exe
Size: 671.28 KB (671282 bytes)
MD5: d593ccf1c7439e506f3bfa5c3156da4d
Detection count: 25
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
MSx.exe File name: MSx.exe
Size: 411.64 KB (411648 bytes)
MD5: f0466ddaa45c1ea58e3086080af19381
Detection count: 24
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
C:\rogueware samples\folder\infested 11 11 2022\malware (3).exe File name: malware (3).exe
Size: 1.03 MB (1037918 bytes)
MD5: 1f58d870738aaebb12ed7ece90781c6a
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: C:\rogueware samples\folder\infested 11 11 2022\malware (3).exe
Group: Malware file
Last Updated: May 6, 2024

More files

Additional Information

The following cookies were detected:
msscanner

5 Comments

  • Art says:

    Great stuff. Removed MS Antivirus + some other bad programs. Thanks a lot.

  • ric barbaza says:

    Thank you very much for this information(even though at this point in time the info is relatively higly technical for me to grasp; and, I'm learning). You're doing a great service to us - the general public consumer! More power & acknowledgement to you! Appreciating you, Ric

  • kristen says:

    THANK YOU SO MUCH!!! This is the only thing that helped and SpyHunter3 was the only program that found eveything!!!

  • mary anne says:

    does the system restore thing deletes any data from your computer (such as formatting?) sorry for asking but i better ask bec i need to keep all data and programs i have

  • mike says:

    Does anyone know where this company promoting this malware is located? I would like to contact them.

Loading...