AV7

AV7 is a renamed copy of Antivirus 7 - a rogue anti-virus application. AV7 is placed into unsuspecting users' computers by sneaky Trojans. Once AV7 is inside a system it will display bogus pop-up alerts and scanners, as well as fake malware reports such as "Resident Shield: New virus detected". Users should ignore all types of notifications displayed by AV7 and never follow the recommendation to purchase its "full" version. AV7 is a useless application that should be removed upon detection.

File System Details

AV7 may create the following file(s):
# File Name Detections
1. %WINDOWS%\system32\UpdateExplorer.dll
2. %Program Files%\AV7\antivirus7.exe
3. UpdateExplorer.dll
4. %Documents and Settings%\All Users\Start Menu\AV7\Uninstall.lnk
5. %UserProfile%\Desktop\Antivirus7.lnk
6. %Documents and Settings%\All Users\Start Menu\AV7\Antivirus7.lnk
7. %WINDOWS%\SoftwareDistribution\DataStore\Logs\tmp.edb
8. %Documents and Settings%\All Users\Start Menu\AV7
9. %Program Files%\AV7

Registry Details

AV7 may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}
HKEY_CLASSES_ROOT\CLSID\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "WinNT-EVI 12.03.2010?
HKEY_CURRENT_USER\Software\EVA246
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV7?

Trending

Most Viewed

Loading...