Effects
AntivirusPro2010 is an adware program that carries out the following actions:
- When it is run, a notification like the following is displayed, informing users that Windows has detected malware in their computer:
- Then, it starts scanning the computer:
- The result of the scan will indicate that the computer is infected with many malware samples.
- If users decide to follow the program's instructions and remove the threats, the program will require that users get the full license of the program.
- Therefore, the user will be redirected to a website where it can be purchased:
- On the other hand, if users decide not to follow the recommendations of the program, several pop-up windows like the following will be displayed informing them that their computer is infected:
Infection strategy
AntivirusPro2010 creates the ANTIVIRUSPRO_2010.EXE and ANTIVIRUSPRO_2010.CFG in the folder AntivirusPro_2010, created by itself, in the Program Files directory.
AntivirusPro2010 creates a shortcut to the program in the Desktop:
Additionally, it creates several files in different directories of the system in order to detect them in the malware scan it carries out and to make users think that their computer is infected. However, they are inoffensive files, which does not belong to malware.
The following are some examples:
BOWEJ.DLL
CYHEMATU._DL
ECALENEQ.BIN
IXYX._SY
MODYZAS.SYS
OZOPOGU._DL
AntivirusPro2010 creates the following entry in the Windows Registry:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Antivirus Pro 2010 = C:\Program Files\AntivirusPro_2010\AntivirusPro_2010.exe /hide
By creating this entry, AntivirusPro2010 ensures that it is run whenever Windows is started. Additionally, this entry is hidden.
Means of transmission
AntivirusPro2010 can reach the computer when the user accesses certain websites which display banners or pop-up windows which lead to the download of this program. It can also reach the computer in a link that can be received via spam messages, fraudulent websites, etc.
Further Details
AntivirusPro2010 is 266,752 bytes in size.