WindowsProblemsProtector
WindowsProblemsProtector
Found:
2011-02-03
Description:
Win32.FraudTool.WindowsProblemsProtector is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.
Known system changes:
Files
%current user%\Application Data\<random>.exe
Folders
RegistryEntries
HKCU\SoftWare\Microsoft\Windows NT\CurrentVersion\Winlogon
Value: "Shell"
Data: %current user%\Application Data\<random>.exe