AntiVir64 Description

 

 

[+] Click Image to Enlarge

 

 

CartCart

Antivir64 or Antivir 64, is a rogue anti-spyware program and clone of Power Antivirus 2009 and Antispyware2008. Antivir64 may have been installed by a Trojan (Zlob, Vundo or Downloader) found on fake video codec downloads. Once the Trojan is installed, it may generate imaginary system notifications stating that the user’s computer is infected with spyware. In order to remove the imaginary infections, Antivir64 will offer Antivir64’s full version of the program. Antivir64’s rogue messages may redirect the user to Antivir64’s website (scanner.antivir64.com) to further download the full Antivir64 program. Antivir64 may also use its fake system scan to emulate a computer system scan and generate erroneous scan results.

Type: Rogue AntiSpyware Programs

How Can You Detect AntiVir64?

AntiVir64 Technical Report

As new AntiVir64 details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following AntiVir64 files with its MD5s were created in the system:

AntiVir64 Video Demo

Click on the “How AntiVir64 Infects Your Computer” video to see a AntiVir64 infection in action! See through the eyes of an unsuspecting Internet user while him/her is being victimized by AntiVir64.

At the end of this video, there’s a link to download SpyHunter’s Free Spyware Scanner. SpyHunter’s Free Spyware Scanner is for detection purposes only. To remove AntiVir64, you must purchase SpyHunter’s full version.

Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how AntiVir64 infects a computer. The video contains clickable buttons.

AntiVir64 has typically the following processes in memory:

• Antivir64.exe
• c:\Program Files\Antivir64\Uninstall.exe
• c:\Program Files\Antivir64\Antivir64.exe

AntiVir64 created the following directories, files, paths:

• %AppData%\Antivir64
• %ProgramFiles%\Antivir64

AntiVir64 creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivir64″

Important Article Disclaimer