1. /
  2. Security Response/
  3. AntiVirus2008

AntiVirus2008

Updated:
May 9, 2008 7:33:41 AM
Type:
Misleading Application
Name:
AntiVirus2008
Version:
Unknown
Publisher:
Unknown
Risk Impact:
Medium
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP
Behavior
The program may be downloaded by other malware or from www.antivirus-scanner.com.

The program must be manually installed.

The program reports false or exaggerated system security threats on the computer.





The user is then prompted to pay for a full license of the application in order to remove the errors.





Installation
When the program is executed, it creates the following files:
  • %UserProfile%\Start Menu\Antivirus\Antivirus 2008.lnk
  • %UserProfile%\Start Menu\Antivirus\Uninstall Antivirus.lnk
  • %ProgramFiles%\Antivirus 2008\Antvrs.exe


Next, the program creates the following registry entry so that it executes whenever Windows starts:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Antivirus" = "%ProgramFiles%\Antivirus 2008\Antvrs.exe"

It also creates the following registry subkeys:
  • HKEY_CURRENT_USER\Software\Antivirus
  • HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus


Similar Security Risks:

XPAntiVirus

Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver