Personal Antivirus Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCartCartCart

Personal Antivirus is a fake anti-spyware program. Personal Antivirus was found to be a clone of two other rogue anti-spyware applications named Internet Antivirus Pro and General Antivirus. All of these applications share one main objective, getting computer users to purchase a full version.

Personal Antivirus may come from a Trojan such as Vundo by installing the Personal Antivirus application without your consent. Personal Antivirus usually generates a multitude of misleading security popups and system messages about your system having various computer infections. Personal Antivirus should not be used for detection or removal of any type of computer parasites. You must ignore all messages and system scan results that come from Personal Antivirus.

Type: Rogue AntiSpyware Programs

How Can You Detect Personal Antivirus?

Personal Antivirus Technical Report

As new Personal Antivirus details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Personal Antivirus files with its MD5s were created in the system:

Personal Antivirus has typically the following processes in memory:

• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• PersonalAntivirus[1].exe
• wincontrol.dll
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %PROGRAMFILES%\PAV\pav.exe
• Security Software.exe
• c:\Program Files\Personal Antivirus\PerAvir.exe
• %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
• pav.exe
• PersonalAV.exe

Personal Antivirus created the following directories, files, paths:

• %ProgramFiles%\PersonalAV

Personal Antivirus creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine

Important Article Disclaimer