AntivirusMonitor

AntivirusMonitor

Found: 
2011-03-07
Description: 

Win32.FraudTool.AntivirusMonitor is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.

Known system changes: 

Files


%temp%\<random>.exe
Folders

RegistryEntries

Key: HKEY_CURRENT_USER\Software\dweeiohtrennls
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: <random>