Threat Database Rogue Anti-Virus Program Win 7 Antivirus Plus 2013

Win 7 Antivirus Plus 2013

Threat Scorecard

Ranking: 5,032
Threat Level: 20 % (Normal)
Infected Computers: 3,554
First Seen: December 5, 2012
Last Seen: September 20, 2023
OS(es) Affected: Windows

Win 7 Antivirus Plus 2013 Image

Win 7 Antivirus Plus 2013 is part of the notorious family named FakeRean which is also referred to as Braviax. Win 7 Antivirus Plus 2013 and its clones target inexperienced computer users in order to make them victims of a well known online strategy. This strategy consists in convincing the victim to purchase expensive upgrades for a fake security program. To do this, Win 7 Antivirus Plus 2013 spams the victim with constant error messages and alarming, fake system scans indicating that the infected computer is severely infected. Since Win 7 Antivirus Plus 2013 is actually part of a threat attack itself, PC security researchers strongly advise computer users to ignore all instructions from Win 7 Antivirus Plus 2013. Instead, a real anti-malware tool should be used to remove the Win 7 Antivirus Plus 2013 infection from the infected computer.

Why Win 7 Antivirus Plus 2013 Intrudes into Your Computer

Security researchers have uncovered dozens of clones of Win 7 Antivirus Plus 2013. It is not difficult to recognize these fake security programs because they use similar patterns for their attack. In fact, since their names are very likely generated automatically, it is possible to recognize Win 7 Antivirus Plus 2013 and its clones from their name alone. These fake security programs' names may have three parts:

  1. Win 7 Antivirus Plus 2013's name begins with a term that corresponds to the victim's operating system. While in this case, the term is 'Win 7', indicates that Win 7 Antivirus Plus 2013 is installed on computers running Windows 7, it may also be 'XP', 'Vista' or Win 8, corresponding to Windows XP, Windows Vista, and Windows 8. When Win 7 Antivirus Plus 2013 is being installed, the Trojan responsible for installing this fake security program detects the victim's operating system and ensures that the variant of this fake security program corresponds to the targeted computer's operating system.
  2. The operating system variant is followed with a generic term that disguises these fake security programs as security applications. There are dozens of variants with broad terms such as 'security', 'total security', 'anti-spyware', or 'antivirus plus' in this case.
  3. Finally, the year of release is added to the end of each program's name. Win 7 Antivirus Plus 2013 is part of a large batch of threats that pretend to be the '2013' version of established anti-virus families.

Some examples of the various names that Win 7 Antivirus Plus 2013 clones may have are Antivirus 2008, Windows Antivirus 2008, Vista Antivirus 2008, Antivirus Pro 2009, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, PC Clean Pro, XP Home Security 2012, Windows Clear Problems, XP Security 2012, Antivirus PRO 2015. Screenshot

File System Details

Win 7 Antivirus Plus 2013 may create the following file(s):
# File Name Detections
1. %UserProfile%\Start Menu\Programs\Win 7 Antivirus Plus 2013\Win 7 Antivirus Plus 2013.lnk
2. %UserProfile%\Desktop\Win 7 Antivirus Plus 2013.lnk

Registry Details

Win 7 Antivirus Plus 2013 may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Win 7 Antivirus Plus 2013"

URLs

Win 7 Antivirus Plus 2013 may call the following URLs:

desktopdefendersurveys.com

Messages

The following messages associated with Win 7 Antivirus Plus 2013 were found:

Privacy alert!
Rogue malware detected in your system. Data leaks and system damage are possible. Click here for a free security scan and spyware deletion.
Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a
security scan and deletion now.
System Hacked!
Unknown program is scanning your system registry right now! Identity theft detected!
Details
Attack from 125.237.54.211 port 2336
Attacked port: 45182
Threat: Trojan-Spy.HTML.Backfraud.jk
System hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.
Threat Info: Trojan-Downloader.BAT.Ftp.ab
Risk: Low
Description: This script for a Windows FTO client can download other executable files without the knowledge or consent of the user. It may be used to download Trojan programs to the victim machine.
Tracking software found!
Your PC activity is being monitored. Possible spyware infection. Your data security may be compromised. Sensitive data can be stolen. Prevent damage now by completing a security scan.
Win 7 Antivirus Plus 2013 Alert
Internet Connection alert!
Suspicious network activity detected!
Malware infection is possible!
Win 7 Antivirus Plus 2013 Alert
System hacked!
Unknown programs is scanning your system registry right now! Identity theft detected!

Trending

Most Viewed

Loading...