Wednesday, December 28, 2011

Super AV - Fake AV - rogue

Super AV - Fake AV - Rogue





Files:
C:\WINDOWS\atexbees.exe


Register:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Security" = "C:\Windows\atexbees.exe"

Wednesday, December 14, 2011

Security Monitor 2012

Security Monitor 2012 - it's fake antivirus. It's a rogue that found false detects on your PC and ransom money for healing computer.



Virus create next files:
%AppData%\Microsoft\Internet Explorer\Quick Launch\Security Monitor.lnk
%AppData%\Security Monitor\IcoActivate.ico
%AppData%\Security Monitor\IcoHelp.ico
%AppData%\Security Monitor\IcoUninstall.ico
%AppData%\Security Monitor\Security Monitor.exe
%AppData%\Security Monitor\securityhelper.exe
%AppData%\Security Monitor\securitymanager.exe
%Desktopdir%\Security Monitor.lnk
%StartMenu%\Programs\Security Monitor\Activate Security Monitor.lnk
%StartMenu%\Programs\Security Monitor\Help Security Monitor.lnk
%StartMenu%\Programs\Security Monitor\How to Activate Security Monitor.lnk
%StartMenu%\Programs\Security Monitor\Security Monitor.lnk
%StartMenu%\Programs\Security Monitor.lnk

Registry edit:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
[Security Monitor] = "\"C:\\Documents and Settings\\Admin\\Application Data\\Security Monitor\\Security Monitor.exe\" /STARTUP"
[Security Monitor 2012 Security] = "C:\\Documents and Settings\\Admin\\Application Data\\Security Monitor\\securitymanager.exe"


Remove this virus very easy. Just read next guides:

I hope my guides help you to clean your PC from viruses and trojans.