Saturday, March 20, 2010

antiviruspro2010

Type: rogue

Alias: antivirus pro 2010, antiviruspro_2010

Company: XP AntiSpyware 2009.com

Description: AntivirusPro2010 is a rogue anti-spyware. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats. AntivirusPro2010 is also known as Antivirus Pro 2010.

Malware Threat

antiviruspro2010

Directories

C:\Documents and Settings\user-account-name\Start Menu\Programs\AntivirusPro_2010
C:\Documents and Settings\user-account-name\Start Menu\Programs\Antivirus Pro 2010
C:\Program Files\AntivirusPro_2010
C:\Program Files\Antivirus Pro 2010
C:\Program Files\AntivirusPro_2010\data
C:\Program Files\Antivirus Pro 2010\data

Files

%quicklaunchdir%\AntivirusPro_2010.lnk
%quicklaunchdir%\Antivirus Pro 2010.lnk
C:\Documents and Settings\user-account-name\Desktop\AntivirusPro_2010.lnk
C:\Documents and Settings\user-account-name\Desktop\Antivirus Pro 2010.lnk
C:\Documents and Settings\user-account-name\Start Menu\Programs\AntivirusPro_2010\Uninstall.lnk
C:\Program Files\AntivirusPro_2010\wscui.cpl
C:\Program Files\AntivirusPro_2010\AVEngn.dll
C:\Program Files\AntivirusPro_2010\htmlayout.dll
C:\Program Files\AntivirusPro_2010\Uninstall.exe
C:\Program Files\AntivirusPro_2010\pthreadVC2.dll
C:\Documents and Settings\user-account-name\Start Menu\Programs\AntivirusPro_2010\AntivirusPro_2010.lnk
C:\Program Files\AntivirusPro_2010\AntivirusPro_2010.cfg
C:\Program Files\AntivirusPro_2010\AntivirusPro_2010.exe
antiviruspro_2010.lnk (md5:a1ba703dd710d1e9df01ae...)
antiviruspro_2010.exe (md5:a4b6177b5bf235a170c36b...)

Registry Keys

HKEY_LOCAL_MACHINE\SOFTWARE\AntivirusPro_2010
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus Pro 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntivirusPro_2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus Pro 2010

Registry Values

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Antivirus Pro 2010

- agent.avmAgent.AVM is a Trojan that allows hackers to gain access and full control over the infected computers.
- agent.awgAgent.AWG is a Trojan for the Windows platform. Agent.AWG includes functionality to access the internet and communicate with remote servers via HTTP.
- agent.axAgent.AX is a trojan that allows hackers to gain access and full control over the infected computers.
- agent.axaAgent.AXA is a backdoor worm that spreads through network shares and allows attackers to access and control over infected computer.
- agent.axgAgent.AXG is a network worm with backdoor Trojan functionality for the Windows platform. Agent.AXG connects to a predetermined IRC server and awaits commands from remote attackers.
- agent.axjAgent.AXJ is a trojan which is a malicious program that allows unauthorized access to your computer.
- agent.axxAgent.AXX is a Rootkit for the Windows platform. It attempts to steal login details and block access to anti-virus related web and FTP sites.

antiviruspro2010

ACROSS THE GLOBE

ACROSS THE GLOBE

IN United States

FROM United States