The aplication named itself AntiVirus2008 but it is not an antivirus software, it is a virus. AntiVirus2008 is a misleading application that may give exaggerated reports of threats on the computer. Version: Unknown, Publisher: Unknown. Risk Impact: Medium. Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
The program may be downloaded by other malware or from www.antivirus-scanner.com. The program must be manually installed. The program reports false or exaggerated system security threats on the computer.
When the program is executed, it creates the following files:
* %UserProfile%\Start Menu\Antivirus\Antivirus 2008.lnk
* %UserProfile%\Start Menu\Antivirus\Uninstall Antivirus.lnk
* %ProgramFiles%\Antivirus 2008\Antvrs.exe
Next, the program creates the following registry entry so that it executes whenever Windows starts:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “%ProgramFiles%\Antivirus 2008\Antvrs.exe”
It also creates the following registry subkeys:
* HKEY_CURRENT_USER\Software\Antivirus
* HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
Perhaps what you need is the real anti virus application such as free avg or McAfee SuperDAT
Visit SecurityLabs
Software developer site
1 response so far
1 Lucas Swann ~ Jul 11, 2008 at 9:56 pm
did a google search and found this article. i removed those registry entries that you listed and those directories. It got rid of the program but i kept getting popups. found another link http://www.pchubs.com/blogs/antivirus-2008-removal-process-remove-antivirus2008 where i ran smitfraudfix and it got rid of the popups. i had to boot in safe mode and then run it. worked good. thanks for the info!
Leave a Comment