Antivirus Protection 2012

Threat Scorecard

Ranking: 11,307
Threat Level: 100 % (High)
Infected Computers: 167
First Seen: February 17, 2012
Last Seen: September 18, 2023
OS(es) Affected: Windows

Antivirus Protection 2012 Image

Antivirus Protection 2012 is one of the many rogue anti-virus programs belonging to the UnVirex family of scamware. These kinds of fake anti-virus applications will use the same interface repeatedly, only changing the name of each particular member of this family of malware in order to stay one step ahead of PC security researchers. ESG security researchers indicates that Antivirus Protection 2012 is designed to mislead its victims, providing fake error reports and system scans designed to convince this malware infection's victims into purchasing a useless license for Antivirus Protection 2012. An Antivirus Protection 2012 infection will often be associated with the presence of other malware on your computer and should be regarded as a severe threat to your computer system's security.

Despite Its Name, the Antivirus Protection 2012 Scam Goes Back Several Years

Do not be misled by the "2012" appended to the ending of Antivirus Protection 2012's name. This is simply added to the end of this rogue program's name in an attempt to make this fake security program appear new and improved. However, malware like Antivirus Protection 2012 has been using what is basically the same interface and attack strategy since at least 2010. As a way to create multiple versions of the same malware threat with a minimum of effort, there are dozens of clones of Antivirus Protection 2012, some of which include fake security applications such as UnVirex, Desktop Security 2010, Antivirus Studio 2010, Securityinspector2010, Antivirus System 2011, Antivirus Antispyware 2011, Security Solution 2011.

How Antivirus Protection 2012 Attempts to Steal Your Money

Antivirus Protection 2012 is designed to display authentic-looking error messages and alerts indicating the presence of malware on the victim's computer. However, ESG security researchers advise against paying attention to any of these so-called warnings, since Antivirus Protection 2012 is a malware infection itself and has no way of detecting or removing malware. This fake security program will insert links leading to its website in various places in order to attempt to direct its victim to a form asking for the victim's credit card information in exchange for a useless registration code for its non-existent full version. The registration code LIC2-00A6-234C-B6A9-38F8-F6E2-0838-F084-E235-6051-18B3 has been known to diminish some of this rogue security program's symptoms while you use a reliable anti-malware tool to remove it from your computer.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Aliases

8 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AVG Generic27.MSX
Microsoft Rogue:Win32/FakeRean
Sophos Mal/FakeAV-OQ
BitDefender Gen:Variant.Kazy.56883
Kaspersky HEUR:Trojan.Win32.Generic
Avast Win32:FakeAlert-CAK [Trj]
Panda Suspicious file
McAfee FakeAlert-Rena.ci

SpyHunter Detects & Remove Antivirus Protection 2012

Antivirus Protection 2012 Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

Antivirus Protection 2012 may create the following file(s):
# File Name MD5 Detections
1. AntivirusProtection2012.exe e623346586ea7ab65d32e66e9c3eea62 42
2. securitymanager.exe 9fce5f2af40e6defd37d417672f5e6fe 13
3. AntivirusProtection2012.exe 7f4454dda5c1fad7c55c2fb30af17dee 11
4. securitymanager.exe 917c4059dc649b28b13a3534984d789d 10
5. securitymanager.exe fd0456f67b13951445cecae1b0df7b4a 10
6. AntivirusProtection2012.exe 00c5ef15f8974651260bdfd5d7e028ea 7
7. securityhelper.exe 68fd15c187ccf9e612c498f9ca56a041 4
8. AntivirusProtection2012.exe 9c1438460dddf6f9656b0e8735537923 4
9. securityhelper.exe 85c504bd57e2140716d28a2802248cdf 2
10. %AppData%\Antivirus Protection\antivirusprotection2012.exe
11. %AppData%\Antivirus Protection\securitymanager.exe
12. %Desktop%\Antivirus Protection.lnk
13. %StartMenu%\Programs\Antivirus Protection\antivirus protection.lnk
14. %AppData%\Antivirus Protection\IcoActivate.ico
15. %AppData%\Antivirus Protection\IcoHelp.ico
16. %AppData%\Antivirus Protection\IcoUninstall.ico
17. %AppData%\Microsoft\Internet Explorer\Quick Launch\Antivirus Protection.lnk
18. %StartMenu%\Programs\Antivirus Protection.lnk
19. %StartMenu%\Programs\Antivirus Protection
20. %StartMenu%\Programs\Antivirus Protection\Activate Antivirus Protection.lnk
21. %StartMenu%\Programs\Antivirus Protection\Help Antivirus Protection.lnk
22. %StartMenu%\Programs\Antivirus Protection\How to Activate Antivirus Protection.lnk
23. %Temp%\2010yo.exe
24. %Temp%\472a10e2ebxd9.exe
25. %Temp%\56493.exe
26. %Temp%\cosock.exe
27. %Temp%\cowceb.exe
28. %Temp%\d20mes.exe
29. %Temp%\dc_3.exe
30. %Temp%\ddoll3342.exe
31. %Temp%\destroyer.exe
32. %Temp%\exppdf_w.exe
33. %Temp%\hhbboll_2.exe
34. %Temp%\jofcdks.exe
35. %Temp%\lols.exe
36. %Temp%\puzpup.exe
37. %Temp%\sycre.exe
38. %Temp%\winifi.exe
39. %Temp%\wwwsssgen.exe

Registry Details

Antivirus Protection 2012 may create the following registry entry or registry entries:
File name without path
Antivirus Protection 2012.lnk
Antivirus Protection.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run!Inspector
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run!Inspector
Software\Antivirus Protection 2012

Directories

Antivirus Protection 2012 may create the following directory or directories:

%APPDATA%\Antivirus Protection
%APPDATA%\Antivirus Protection 2012

Messages

The following messages associated with Antivirus Protection 2012 were found:

Antispyware software warningYour computer is infected with spyware and malware. Last scan results: 364 infected files found! Click this notification to fix the problem.
Antivirus Protection 2012
The application excel.exe was launched successfully but it was forced to shut down due to security reasons. This application infected by a malicious software program which might present damage for the PC. It is highly recommended to make a full scan of your computer to exterminate the malicious programs from it.
Antivirus Protection 2012
Your computer is being used as spamming machine. You can get sued for spam. Your computer WIL BE DISCONNECTED FORM <sic> INTERNET BECAUSE SPAMMING OTHER PCs.
Reported Insecure Browsing: Navigation Blocked
Insecure Internet Activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms, and Trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information.
Reported Insecure Browsing: Navigation Blocked Insecure Internet Activity. Threat of virus attack Due to insecure Internet browsing your PC can easily get infected with viruses, worms, and Trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information.
Security Center
Unauthorized remote connection!
Your system is making an unauthorized personal data transfer to a remote computer!
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
To protect your private data, please click "Prevent Connection" button below.
Security Center Alert
To help protect your computer, Security Center has blocked some features of this program.
Do you want to block this suspicious software?
Name: Sft.Dez.Wien
Risk: High
Security Center Alert
To help protect your computer, Security Center has blocked some features of this program.
Name: Screen.Grab.J.exe
Risk: High
Security Center Alert To help protect your computer, Security Center has blocked some features of this program. Name: Screen.Grab.J.exe Risk: High
Security Center Unauthorized remote connection! Your system is making an unauthorized personal data transfer to a remote computer! Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded. To protect your private data, please click "Prevent Connection" button below.
System critical warning!
You have been infected by a proxy-relay Trojan server
Your query looks similar to automated requests from a spyware application.
Your system has come under attack of hostile software.
Click here to deactivate it.
System critical warning! You have been infected by a proxy-relay Trojan server Your query looks similar to automated requests from a spyware application. Your system has come under attack of hostile software. Click here to deactivate it.
You have been infected by a proxy-relay trojan server with new and danger "SpamBots".
You have a computer with a virus that sends spam.
This is a mass-mailing worm with backdoor thus allowing un-authorized access to the infected system.
It spreads by mass-mailing itself to e-mail addresses harvested from the local computer or by querying on-line search engines such as google.com.
The IP [IP ADDRESS] address that YOU are getting from Internet Service Provider (ISP) for YOU personal computer is on some major blacklist.
Your computer has been used to send a huge amount of junk e-mail messages during the last days.
You IP <ip address> will be marked in the Police log file as mass-mailing spam assist.
Upgrading to the full version Antivirus Protection 2012 it will eliminate the majority of Spam attempts.
Your computer might be at risk
Antivirus detects viruses, worms, and Trojan horses. They can (and do) destroy data, format your hard disk or can destroy the BIOS. By destroying the BIOS many times you end up buying a new motherboard or if the bios chip is removable then that chip would need replacing
Your computer might be at risk Antivirus detects viruses, worms, and Trojan horses. They can (and do) destroy data, format your hard disk or can destroy the BIOS. By destroying the BIOS many times you end up buying a new motherboard or if the bios chip is removable then that chip would need replacing

3 Comments

If you would like to improve your know-how just keep visiting this web site and be updated with the latest information posted here.

These are really impressive ideas in on the topic of
blogging. You have touched some good factors here. Any
way keep up wrinting.

My phone can't take calls and my watsap and facebook is not working, it seems like it has formatted.

Related Posts

Trending

Most Viewed

Loading...