Antivirus Lab 2009 Description

Antivirus Lab 2009, AntivirusLab 2009 or AntivirusLab 2009 2.1, is a rogue anti-spyware program. Antivirus Lab 2009 is known to deceive computer users with fake security warning messages stating that their computer system is flooded with spyware. This tactic is widely used by many rogues roaming the Internet today, their final purpose is to sell a fake anti-spyware program as a legitimate software. Antivirus Lab 2009 promises to remove the user’s spyware infections once he/she has spent his/her money on this major scam.

Antivirus Lab 2009 may be installed with the help of Trojans through a fake video codec download or from a rogue website. Users usually download Antivirus Lab 2009’s trial version thinking it’ll be an effective spyware remover. In addition, Antivirus Lab 2009 may display fake system tray alerts and launch its fake system scan. Once the user’s computer is supposedly scanned, he/she will receive a list of supposed spyware infections as a result. In order to remove these imaginary threats, the user will be urged to purchase Antivirus Lab 2009’s full version.

Antivirus Lab 2009 may also cause system slowdowns and errors in applications.

Type: Spyware

Automatic Detection of Antivirus Lab 2009

Antivirus Lab 2009 Technical Report

As new Antivirus Lab 2009 details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Antivirus Lab 2009 files with its MD5s were created in the system:

Antivirus Lab 2009 has typically the following processes in memory:

• c:\Program Files\AntiVirusLab2009\AVLWarning.dll
• c:\Program Files\AntiVirusLab2009\uninst.exe
• AntiVirusLab2009.exe
• c:\Program Files\AntiVirusLab2009\AntiVirusLab2009.exe
• C:\WINDOWS\system32\fbjvt.dll

Antivirus Lab 2009 created the following directories, files, paths:

• %ProgramFiles%\AntiVirusLab2009

Antivirus Lab 2009 creates the following registry entries:

• HKEY_CLASSES_ROOT\AVLWarning.WarningBHO.1
• HKEY_CLASSES_ROOT\CLSID\{C2A9759D-210A-0253-D944-8B76AC2B0D92}
• HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
• HKEY_CLASSES_ROOT\AVLWarning.WarningBHO
• HKEY_CLASSES_ROOT\CLSID\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
• HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “AntiVirusLab2009″
• HKEY_CURRENT_USER\Software\AntiVirusLab2009
• HKEY_LOCAL_MACHINE\SOFTWARE\Licenses
• HKEY_CLASSES_ROOT\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiVirusLab2009
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirusLab2009

Important Article Disclaimer