WindowsDiagnostic
WindowsDiagnostic
Found:
2011-03-14
Description:
Win32.FraudTool.WindowsDiagnostic is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.
Known system changes:
Files
%application data%\<random>.exe
%application data%\<random>.exe
Folders
Registry
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: <random>