Advanced Antivirus Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCartCart

Advanced Antivirus, AdvancedAntivirus, Advanced Antivirus 2008, AdvancedAntivirus 2008 or AdvancedAntivirus2008, is a rogue anti-spyware program known by the experts as “the worst threat of this year”, family of infamous Windows Antivirus 2008, Vista Antivirus 2008 and Ultimate Antivirus 2008.

Advanced Antivirus may have leaped into the user’s computer system through a Trojan, such as Zlob, or by using drive-by download methods without the user’s knowledge. Once Advanced Antivirus is installed, it will emulate a fake system scan and generate false threat reports in an attempt to trick the user into purchasing the full Advanced Antivirus commercial version. Advanced Antivirus has the ability to display fake warning notifications and a fake icon on the user’s system tray stating that the computer’s system is infected with spyware. Advanced Antivirus’s rogue messages may read: “Critical System Error”, “Your computer is infected”, “Trojan-Spy.win32@mx”, “Virus Alert”, and “Security Alert”. If the user is deceived and clicks on one of these messages, the user will be redirected to Advanced Antivirus’s website (www.aav2008.com), where Advanced Antivirus is advertised as a legit software. Advanced Antivirus promises to deliver a solution to your supposed threats, when in reality, Advanced Antivirus is just another scam created to steal money from credulous users. In addition, Advanced Antivirus may hijack user’s homepage, redirecting them to malicious websites.

Advanced Antivirus launches on every Windows start up and has the ability to recreate itself. Advanced Antivirus may be difficult to manually remove and it’s considered a threat to user’s personal and financial information.

Type: Rogue AntiSpyware Programs

How Can You Detect Advanced Antivirus?

Advanced Antivirus Technical Report

As new Advanced Antivirus details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Advanced Antivirus files with its MD5s were created in the system:

Advanced Antivirus has typically the following processes in memory:

• AAVSetup[1].exe
• aav.exe
• c:\Program Files\AAV\aav.exe
• %PROGRAMFILES%\AAV\aav.exe

Advanced Antivirus creates the following registry entries:

• HKEY_CURRENT_USER\Software\AAV
• HKEY_CURRENT_USER\Software\AntiVirus
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus”
• HKEY_CLASSES_ROOT\.key
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus”

Important Article Disclaimer