Advanced Virus Remover Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCartCartCartCartCartCart

Advanced Virus Remover (alternately known as AdvancedVirusRemover) is a rogue anti-spyware application. Its main objestive appears to be persuading users to purchase and install its licensed version. Advanced Virus Remover achieves this goal by first infiltrating the computer using affiliated trojans without informed consent. Secondly, Advanced Virus Remover then begins displaying numerous popup system warnings and system tray alerts reporting viruses that can allegedly damage confidential data and deteriorate the system performance. Advanced Virus Remover also runs fabricated security scans that return false results full of spyware applications, trojans, worms and other malware. These are all used to mislead the user into purchasing this malicious program, Advanced Virus Remover.

Type: Rogue Anti-Virus Program

Automatic Detection of Advanced Virus Remover

Advanced Virus Remover Technical Report

As new Advanced Virus Remover details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Advanced Virus Remover files with its MD5s were created in the system:

Advanced Virus Remover has typically the following processes in memory:

• SetupAdvancedVirusRemover[1].exe
• winupdate.exe
• %Program Files%\AdvancedVirusRemover\PAVRM.exe
• PAVRM.exe

Advanced Virus Remover created the following directories, files, paths:

• %ProgramFiles%\AdvancedVirusRemover

Advanced Virus Remover creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\CpMRU
• HKEY_CURRENT_USER\Software\AVR

Important Article Disclaimer