AntivirusScan
AntivirusScan
Found:
2011-01-14
Description:
Win32.FraudTool.AntivirusScan is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.
Known system changes:
Files
Folders
RegistryEntries
Key: HKEY_CURRENT_USER\Software\qni8hj710fdl
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: rymtfvst
Data: C:\Temp\yxfxemdhc\wehvqywlajb.exe
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value: conhost
Data: C:\Documents and Settings\VPCTest\Application Data\Microsoft\conhost.exe