Resident Shield: New virus detected
"Resident Shield: New virus detected" is a fake security alert displayed on computers infected with Antivirus 7. Once a victim clicks on the link provided on the "Resident Shield: New virus detected" security alert, he/she will be redirected to a malicious website advertising the Antivirus 7 rogueware. Removing Antivirus 7 from your computer will stop the annoying security alerts from being displayed.
Table of Contents
File System Details
Resident Shield: New virus detected may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\UpdateExplorer.dll | |
| 2. | %Program Files%\AV7\antivirus7.exe | |
| 3. | %Documents and Settings%\All Users\Start Menu\AV7\Antivirus7.lnk | |
| 4. | %UserProfile%\Desktop\Antivirus7.lnk | |
| 5. | %Documents and Settings%\All Users\Start Menu\AV7\Uninstall.lnk | |
| 6. | %WINDOWS%\SoftwareDistribution\DataStore\Logs\tmp.edb | |
| 7. | %Program Files%\AV7 | |
| 8. | %Documents and Settings%\All Users\Start Menu\AV7 |
Registry Details
Resident Shield: New virus detected may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}
HKEY_CLASSES_ROOT\CLSID\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform
HKEY_CURRENT_USER\Software\EVA246
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Messages
The following messages associated with Resident Shield: New virus detected were found:
|
Resident Shield: New virus detected
Warning! New virus detected Please click “Remove All” button to heal all infected files and protect your PC |
