Antivir
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 100 % (High) |
| Infected Computers: | 3 |
| First Seen: | December 11, 2009 |
| Last Seen: | January 10, 2019 |
| OS(es) Affected: | Windows |
Antivir Image
Antivir is a fake anti-virus application that is part of a widespread online scam. Although Antivir is disguised as an anti-virus program, Antivir is itself actually part of a Trojan infection. These kinds of Trojans install fake security programs like Antivir to attempt to steal their victims' money. ESG security researchers strongly advise against purchasing Antivir or any anti-virus application that entered your computer system without your authorization and presents characteristics of rogue security programs. Antivir itself should be removed with a legitimate anti-virus application.
Although Antivir has components that disable Task Manager and many legitimate security programs, Antivir's self-defense mechanisms can usually be bypassed by starting up Windows in Safe Mode before attempting to remove this dangerous fake anti-virus application. ESG security researchers advise to ignore all notifications, security alert pop-ups and error messages in the event of an Antivir infection. These are usually caused by Antivir itself in order to convince you to purchase this fake security application. If you have already paid for a useless Antivir registration code, you may be able to contact your credit card company in order to reverse the charges and mark them as fraudulent. Steps should also be taken to protect your credit card information, so a third party does not make any charges to it.
Table of Contents
An Antivir Infection is Often Contracted from Fake Video Codecs
The most usual source of infection with the Trojan that installs Antivir is through a user download. Because of this, ESG security analysts strongly advise being extremely careful with what you download onto your computer system. It is important not to believe everything you read online, since many software downloads are not what they appear. Antivir may be installed by the Zlob Trojan and by Fake Microsoft Security Essentials Alert Trojan. These Trojans are often found as fake video codecs online, especially in websites containing pornographic videos or pirated movies. When attempting to play one of these videos, the victim receives a pop-up window claiming that a particular codec is needed in order to view that video, and then providing a link where that codec can be downloaded. However, this supposed 'codec' will actually install Antivir as well as various other malware threats onto the victim's computer system.
Antivir family, the FakeXPA family, has also been known to have other members, all of them rogue anti-virus applications and clones of Antivir. These clones include 
Aliases
4 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| Symantec | Suspicious.Insight |
| Sunbelt | Trojan.Win32.Generic.pak!cobra |
| Panda | Suspicious file |
| Kaspersky | Packed.Win32.Krap.as |
SpyHunter Detects & Remove Antivir
Antivir Video
Tip: Turn your sound ON and watch the video in Full Screen mode.
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | Antivir.exe | e2540660f0185ebf19157ff69d7f2363 | 0 |
| 2. | Antivir.exe | 18089a8610cb68ff49f7a3802d0c2d16 | 0 |
| 3. | Antivir.exe | f907f81dd1190d5252f866954181f311 | 0 |
| 4. | Antivir.exe | 9f0d9297c7b2c7c49c35ca7d8e9073cb | 0 |
| 5. | Antivir.exe | f09e0686478e2e7477901c67f40c79ca | 0 |
| 6. | Antivir.exe | 4970c8387f8ff7a56a89e7fa9a45359d | 0 |
| 7. | Antivir.exe | 556acb1dae1c04d4b70015163b758bf8 | 0 |
| 8. | Antivir.exe | 6586b6c473de76dd52b9c154960d5e71 | 0 |
| 9. | Antivir.exe | acedb2419f3c796d84ae582b262f6a6e | 0 |
| 10. | Antivir.exe | 05838ec8da13bb58071c1ba23d5ddd63 | 0 |
| 11. | Antivir.exe | 8eaa4bf87aa56649b20da03e5feda871 | 0 |
| 12. | Antivir.exe | c0a19df83e0b2d09bdb65f1813a66a6a | 0 |
| 13. | Antivir.exe | 8eefda86a953bdbe9be6245a8a5bdceb | 0 |
| 14. | Antivir.exe | f5ad3fa51ec6bf1255f86f1628835e2d | 0 |
| 15. | Antivir.exe | 28819b2c14b1ce4400700466eaf658ac | 0 |
| 16. | Antivir.exe | 940b50c1556ee76f2b56d9361207d444 | 0 |
| 17. | Antivir.exe | f8091df4c0d35b7b64daab0d811f0595 | 0 |
| 18. | Antivir.exe | 9f736485dd8528c08aaf0da484a3f884 | 0 |
| 19. | Antivir.exe | e330568b7294a30173b31925ccc371a6 | 0 |
| 20. | Antivir.exe | 04dfdcf553d22099fbdc0369f42b7845 | 0 |
| 21. | Antivir.exe | b6097634b8e83c0859e3a6cb8e77e2be | 0 |
| 22. | Antivir.exe | cb308ff82fd7b8e383709a0d9cc73b32 | 0 |
| 23. | Antivir.exe | 022a2a77688752b572ddbafc95c3c8d1 | 0 |
| 24. | Antivir.exe | ffd538a4ffd1ebb58399268953400d84 | 0 |
| 25. | Antivir.exe | ae4042fb71d8411d6ceef0cadf49f2d9 | 0 |
Directories
Antivir may create the following directory or directories:
| %ProgramFiles%\AntivirAV |
