Best Antivirus Software

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 3
First Seen: May 7, 2012
Last Seen: October 21, 2018
OS(es) Affected: Windows

Best Antivirus Software is not an anti-virus program; Best Antivirus Software belongs to the FakeVimes and is a kind of malware application known as a rogue security program. Malware applications like Best Antivirus Software use misleading error messages in order to scam computer users into purchasing fake anti-virus software. Best Antivirus Software has no actual anti-virus capabilities. Instead, Best Antivirus Software is a program that is merely designed to display fake error messages and attempt to convince the victim to 'upgrade' to a useless full version of Best Antivirus Software. Best Antivirus Software also contains components that can be quite damaging to a computer system; these can disable known security programs, cause browser redirects and prevent the infected computer from working properly.

Known clones of Best Antivirus Software include Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.

Looking Beyond Best Antivirus Software’s Pretty Interface

Best Antivirus Software uses a GUI that looks authentic. It uses trademarked logos and a layout common to leading anti-virus application in order to give off the illusion of legitimacy. However, most of this interface is just for show. When Best Antivirus Software pretends to run a system scan, it is only an animation of a progress bar, and any results simply contain names of known viruses lifted straight from a virus encyclopedia. Because of this, ESG malware analysts advise ignoring all information provided by this fake security program. While Best Antivirus Software uses a variety of pop-up notifications and error messages from the Task Bar, these are all trying to deceive the computer user into buying this fake security program.

Removing Best Antivirus Software from Your Computer System

While manual removal of Best Antivirus Software is possible, ESG malware researchers do not recommend it. This is because Best Antivirus Software belongs to a family of malware that is known for creating numerous 'junk' files in a hard drive as well as being related with several other malware threats involved in the attack. Best Antivirus Software is also often associated with a rootkit component that can be quite difficult to remove manually without harming the infected computer's operating system. Instead of manual removal, ESG security researchers energetically recommend utilizing a dedicated anti-malware application with an anti-rootkit component capable of dealing with Best Antivirus Software and its associated malware.

SpyHunter Detects & Remove Best Antivirus Software

File System Details

Best Antivirus Software may create the following file(s):
# File Name MD5 Detections
1. BA2b7_8028.exe 3e48398eff14278bf723ffb774f7e692 2
2. %CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe
3. %AppData%\Best Antivirus Software\ScanDisk_.exe
4. %UserProfile%\Start Menu\Programs\Best Antivirus Software.lnk
5. %CommonAppData%\[RANDOM CHARACTERS]\BAS.ico
6. %AllUsersProfile%\Application Data\[RANDOM CHARACTERS]\[RANDOM CHARACTERS]
7. %CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].cfg
8. %Desktop%\Best Antivirus Software.lnk
9. %AppData%\Microsoft\Internet Explorer\Quick Launch\Best Antivirus Software.lnk
10. %AppData%\Best Antivirus Software\Instructions.ini
11. %Programs%Best Antivirus Software.lnk

Registry Details

Best Antivirus Software may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Best Antivirus Software" "%CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe" /s /d
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\[1...15]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\[RANDOM CHARACTERS].exe\Debugger = svchost.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun = 01000000
HKEY..\..\{Value}

Messages

The following messages associated with Best Antivirus Software were found:

System Alert
Best Antivirus Software has detected pontentially harmful software in your system. It is strongly recommended that you register Best Antivirus Software to remove all found threats immediately.
Warning! Access conflict detected!
An unidentified program is trying to access system process address space.
Process Name: AllowedForm
Location: C:Windows...taskmgr.exe
Warning! Identity theft attempt detected

Trending

Most Viewed

Loading...