TRE Antivirus Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCartCart

TRE Antivirus is a fake security application. TRE Antivirus is basically a clone of other rogue anti-spyware programs known as Soft Soldier and WiniGuard. TRE Antivirus uses deceiving tactics to extort money from computer users. Usually those actions include displaying fake popup alerts and conduct system scans that return bogus parasite results.

TRE Antivirus is completely unable to detect and remove parasites or fix security issues on a computer. TRE Antivirus can cause damage to a computer it is installed on in addition to block legitimate security programs.

Type: Rogue AntiSpyware Programs

Automatic Detection of TRE Antivirus

TRE Antivirus Technical Report

As new TRE Antivirus details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following TRE Antivirus files with its MD5s were created in the system:

TRE Antivirus has typically the following processes in memory:

• treav.exe

TRE Antivirus created the following directories, files, paths:

• %ProgramFiles%\TRE AntiVirus Software\TRE AntiVirus
• %AllUsersProfile%\Start Menu\Programs\TRE AntiVirus

TRE Antivirus creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• HKEY_LOCAL_MACHINE\SOFTWARE\TRE AntiVirus
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TRE AntiVirus
• TRE AntiVirus

Important Article Disclaimer