McAVG
McAVG
Found:
2011-01-31
Description:
Win32.FraudTool.McAVG is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.
Credit: Tachikoma
Known system changes:
Files
Folders
%ProgramFiles%\mvavg
%StartMenu%\programs\mvavg
%StartMenu%\mvavg
RegistryEntries
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{39361228-08B0-479C-9C8E-852E78595C19}
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Value: C:\Program Files\McAVG\McAVG\mcavg.exe