Advanced Virus Remover System Warning
"Advanced Virus Remover System" Warning is a fake message alert displayed by the rogue anti-spyware application Advanced Virus Remover. The message reads as follows:
"System warning!
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC. It's highly recommended you scan your PC right now."
This fake warning message is used to frighten or intimidate the user into purchasing the malicious anti-virus program Advanced Virus Remover. Infections reported are typically fictitious or often grossly exaggerated.
File System Details
Advanced Virus Remover System Warning may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | PAVRM.exe | |
| 2. | c:\Program Files\AdvancedVirusRemover\AdvancedVirusRemover.exe | |
| 3. | c:\Program Files\AdvancedVirusRemover\Viruses.bdt | |
| 4. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\AdvancedVirusRemover.lnk | |
| 5. | %UserProfile%\Desktop\AdvancedVirusRemover.lnk | |
| 6. |
C:\Documents and Settings\ |
|
| 7. | %UserProfile%\Desktop\Viruses.bdt | |
| 8. |
C:\Documents and Settings\ |
|
| 9. | %UserProfile%\Application Data\Mozilla\Firefox\Profiles\s1jqw0bz.default\cookies.sqlite |
Registry Details
Advanced Virus Remover System Warning may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\AVR
HKEY_CURRENT_USER\Software\AdvancedVirusRemover
5222009A-DD62-49c7-A735-7BD18ECC7350
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\CpMRU
