Antivirus 8 Resident Shield
Antivirus 8 Resident Shield is a fake warning message that pops up on computers infected with the rogue Antivirus 8 application. This fake warning message is used to trick users into thinking that their computers are infected and then coerce them into purchasing Antivirus 8 as a remedy. Users should ignore the "Antivirus 8 Resident Shield" pop-up and use a reliable security tool to remove Antivirus 8 from an infected PC.
File System Details
Antivirus 8 Resident Shield may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Program Files\AV8\av8.exe | |
| 2. | %Documents and Settings\All Users\Start Menu\AV8\Uninstall.lnk | |
| 3. | %Documents and Settings\All Users\Start Menu\AV8\Antivirus8.lnk | |
| 4. | %UserProfile%\Desktop\Antivirus8.lnk | |
| 5. | Documents and Settings\All Users\Start Menu\AV8\ | |
| 6. | %Program Files\AV8\ |
Registry Details
Antivirus 8 Resident Shield may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe "Debugger" = "C:\Program Files\AV8\av8.exe -d"
HKEY_CURRENT_USER\Software\WinFD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "WinNT-A8I 23.09.2010"
HKEY_CURRENT_USER\Software\A88246
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV8"
