AntivirusClean2011

AntivirusClean2011

Found: 
2011-04-12
Description: 

Win32.FraudTool.AntivirusClean2011 is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.

Known system changes: 

Files

Folders

%ProgramFiles%\Antivirus Clean 2011

RegistryEntries

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value: AntivirusClean
Data: C:\Program Files\Antivirus Clean 2011\avc2011.exe
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value: avservice
Data: C:\Program Files\Antivirus Clean 2011\avservice.exe