MalwareMonitor

Printer Friendly Page

Updated: October 5, 2007 3:37:20 PM

Type: Misleading Application

Name: MalwareMonitor

Version: 2.1

Risk Impact: Medium

Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000

Behavior
The program must be manually installed.

When the program is executed, it displays exaggerated reports of threats on the computer.

The user is then prompted to pay for a full license of the application in order to remove the fake threats.

Installation
When the program is executed, it creates the following files:

%UserProfile%\Desktop\MalwareMonitor.lnk
%UserProfile%\Start Menu\Programs\MalwareMonitor\MalwareMonitor.lnk
%UserProfile%\Start Menu\Programs\MalwareMonitor\Uninstall.lnk
%ProgramFiles%\MalwareMonitor\MalwareMonitor.exe
%ProgramFiles%\MalwareMonitor\MalwareMonitor.lic
%ProgramFiles%\MalwareMonitor\MalwareMonitor0.dll
%ProgramFiles%\MalwareMonitor\MalwareMonitor0.mm
%ProgramFiles%\MalwareMonitor\MalwareMonitor1.dll
%ProgramFiles%\MalwareMonitor\MalwareMonitor1.mm
%ProgramFiles%\MalwareMonitor\MalwareMonitor3.dll
%ProgramFiles%\MalwareMonitor\Uninstall.exe

Next, the program creates the following registry entry so that it executes whenever Windows starts:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"MalwareMonitor" = "C:\Program Files\MalwareMonitor\MalwareMonitor.exe"

It also creates the following registry subkeys:

HKEY_CURRENT_USER\Software\MalwareMonitor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MalwareMonitor

Similar Security Risks
DrAntiSpy

Removal

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}