Dr-Info
Dr-Info
Found:
2011-03-01
Description:
Win32.FraudTool.DrInfo is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.
Known system changes:
Files
Folders
%ProgramFiles%\dr-info
RegistryEntries
Key: HKEY_CURRENT_USER\Software\dr-info
Key: HKEY_CURRENT_USER\Software\ydrinfo
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\dr-info
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dr-info
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: dr-info
Data: "C:\Program Files\dr-info\dr-inforun.exe"