Antivirus System Description
Antivirus System is a clone of numerous fake security programs that belong to the WinWeb Security and have been active for several years, at least since 2009. This fake security program carries out a well known scam that consists in displaying fake error messages on the victim's computer in order to make them believe that the affected computer is full of viruses, Trojans and worms. This scam is used to convince inexperienced computer users that they need to purchase a fake 'full version' of Antivirus System. There are several ways in which Antivirus System is distributed. Antivirus System is disguised as a fake video codec which is installed after the victim tries to watch online videos, often with pornographic material. Antivirus System is also distributed through attack websites using exploit kits to compromise visitors' computer systems.
How Antivirus System Tries to Scam Computer Users
Once Antivirus System has been installed, Antivirus System makes changes to the affected computer's settings to ensure that Antivirus System will run automatically whenever the infected computer starts up. Antivirus System will also display fake error messages when the victim tries to open an application or access a website. Antivirus System itself will claim to scan the victim's computer for malware, reporting numerous false positives for severe worms, viruses and Trojans. These results are all fake. It is important to remember that Antivirus System's messages are meant to scam computer users; if Antivirus System claims that a particular file on your computer is malicious, refrain from following its instructions or removing that particular file. Instead, it is important to remove Antivirus System completely with the help of a reliable anti-virus program.
Antivirus System and Similar Infections Should Be Removed ASAP from the Infected PC
Antivirus System should be removed with the help of a reliable anti-malware application, as well as any of its clones that include System Security, Total Security, Antivirus Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, Security Shield, MS Removal Tool, Antivirus Center, Antivirus Center, Essential Cleaner, Security Shield Pro 2011, Personal Shield Pro, Security Shield 2011, Advanced PC Shield 2012, Security Sphere 2012. This fake anti-virus program will often interfere with legitimate security software on the victim's computer. Antivirus System also causes browser redirects preventing the computer user from accessing websites related to computer security. To remove Antivirus System, we recommend starting up the infected computer in Safe Mode and then using a reliable anti-malware program to scan the infected computer. If symptoms persist, it may be necessary to use a specialized anti-rootkit tool to ensure that more severe malware has not been installed on your computer.
Additional Problems Associated with Antivirus System
ESG security researchers have observed various specific techniques used by Antivirus System that make Antivirus System stand out from other rogue security programs. Although Antivirus System uses a standard rogue security program attack, Antivirus System actually scans files on the infected computer. This adds to its credibility since Antivirus System uses the names of actual files on the infected computer. However, Antivirus System does nothing apart from scanning them and still does not have the ability to detect or remove malware on the victim's device. Antivirus System includes features that are present on legitimate security programs such as a customer support hotline and a highly authentic website.
Technical Information
Screenshots & Other Imagery
File System Details
# | File Name | Size | MD5 | Detection Count |
---|---|---|---|---|
1 | %ALLUSERSPROFILE%\pavsdata\21.4.exe | 83,968 | 40461a5ae21e4584d4079a2176691b8b | 3 |
2 | 21.14.exe | 83,968 | dd47b34a8cf4ea2a39ca3a1a57bca724 | 1 |
3 | 21.566.exe | 83,968 | f3f7b5bf4bb134028f8eb6c6450a00cd | 1 |
4 | 21.65535.exe | 83,968 | 3b7f701bfe77426abdf6fbf37f6ddd46 | 1 |
5 | 36.1.exe | 83,968 | 5cb04cac413f96dada1d2339bcee1f08 | 1 |
6 | 35.1.exe | 83,968 | 963ede0129909c3c0baf4ab2f189794c | 1 |
7 | %CommonAppData%\pavsdata\[NUMBER].1.exe | N/A | ||
8 | %CommonAppData%\pavsdata\support.ico | N/A | ||
9 | %CommonStartMenu%\Programs\Antivirus System\Remove Antivirus System.lnk | N/A | ||
10 | %AllUsersProfile%\Desktop\Antivirus System.lnk | N/A | ||
11 | %CommonAppData%\pavsdata\app.ico | N/A | ||
12 | %CommonAppData%\pavsdata\cache.bin | N/A | ||
13 | %CommonStartMenu%\Programs\Antivirus System\Antivirus System Help and Support.lnk | N/A | ||
14 | %CommonAppData%\pavsdata\uninst.ico | N/A | ||
15 | %CommonAppData%\pavsdata\vl.bin | N/A | ||
16 | %CommonStartMenu%\Programs\Antivirus System\Antivirus System.lnk | N/A |
Registry Details
More Details on Antivirus System
Antivirus System Firewall Alert iexplore.exe is infected with Trojan-Downloader.JS.Agent.ftu. Private data can be stolen by third parties, including credit card details and passwords. When you see these messages, please do not be concerned as your applications are not infected. |
Security Alert Unknown program is scanning your system registry right now! Identity theft detected! Threat: Hoax.HTML.OdKlas.a |
Security Alert Vulnerabilities Found Background scan for security breaches has been finished. Serious problems have been detected. Safeguard your system against exploits, malware and viruses right now by activating Proactive Defence. Upgrade to full version of Antivirus System software package now! Clean your system and ward off new attacks against your system integrity and sensitive data. FREE daily updates and online protection from web-based intrusions are already in the bundle. |
Related Posts
- ChannelSystem
- System-scanning.xyz
- PUP.PC Gold Optimizer and System Repair
- PUP.SystemSwift 2
- 'System Activation KEY Has Expired' Pop-Up Scam
Site Disclaimer
This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.