PCVaccine
PCVaccine
Found:
2011-01-31
Description:
Win32.FraudTool.PCVaccine is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.
Credit: Tachikoma
Known system changes:
Files
Folders
%ProgramFiles%\PCVaccine
%StartMenu%\PCVaccine
RegistryEntries
Key: HKEY_CURRENT_USER\Software\PCVaccine
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PCVaccineUp.exe
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCVaccine
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: PCVaccine
Data: C:\Program Files\PCVaccine\PCVaccineLaunch.exe