martedì 16 settembre 2008

Antivirus Lab 2009 : ancora un falso antivirus che invece vi infetta

English Francais Deutsch Espanol Russian Swedish Greek Portuguese Nederland Japanese Chinese Arabic korean Italian

E' stato rilasciato un nuovo falso antivirus :Antivirus Lab 2009
AntiVirus Lab 2009
Si tratta del solito sistema : l'applicazione vi rivela innumerevoli infezioni da virus sul vostro pc (false) quindi vi invita ad acquistare il pacchetto full ....
Chi si fosse inbattuto in questo falso antivirus può rimuoverlo facilmente con questa utility : 
Malwarebytes' Anti-Malware 1.28
oppure , se ve la sentite , questi sono i files e le chiavi da rimuovere :

c:\Program Files\AntiVirusLab2009
c:\Program Files\AntiVirusLab2009\AntiVirusLab2009.exe
c:\Program Files\AntiVirusLab2009\AVLWarning.dll
c:\Program Files\AntiVirusLab2009\uninst.exe
c:\Documents and Settings\All User\Desktop\AntiVirus Lab 2009 2.1.lnk
c:\Documents and Settings\All User\Start Menu\AntiVirus Lab 2009 2.1.lnk
c:\Documents and Settings\All User\Start Menu\Programs\AntiVirus Lab 2009 2.1
c:\Documents and Settings\All User\Start Menu\Programs\AntiVirus Lab 2009 2.1\AntiVirus Lab 2009 2.1.lnk
c:\Documents and Settings\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVirus Lab 2009 2.1.lnk
C:\WINDOWS\system32\fbjvt.dll

Associated Antivirus Lab 2009 Windows Registry Information:

HKEY_CURRENT_USER\Software\AntiVirusLab2009
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO.1
HKEY_CLASSES_ROOT\CLSID\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_CLASSES_ROOT\CLSID\{C2A9759D-210A-0253-D944-8B76AC2B0D92}
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CLASSES_ROOT\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiVirusLab2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirusLab2009
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AntiVirusLab2009"

1 commento: