Braviax

By ZulaZuza in Malware

ESG security researchers have encountered various rogue security programs that, similar to other well-known fake security program Trojans, are characterized by their use of the three most popular versions of the Windows operating systems in their names. Examples of fake security programs belonging to the Braviax family include Win 7 Anti-virus, Vista AntiVirus, XP Antivirus, Win 7 Internet Security, Vista Security, and XP Security. As you can see, the names of these fake security programs follow a pattern. According to ESG security researchers, there are six variants of Braviax-related rogue security programs which are named 'Anti-virus', 'Anti-Spyware', 'Home Security', 'Total Security', 'Security', and 'Internet Security'. These names are always preceded by the infected operating system's name (either Windows 7, Windows Vista, or Windows XP) identified with the strings 'Win 7', 'Vista', and 'XP'. So, for example, you can mix and match these to create such rogue security programs as Win 7 Home Security or XP Security. These fake security programs' names can be followed with the year (either 2011 or 2012) or left as they are. So the previously mentioned rogue security programs may also be named Win 7 Home Security 2011 or XP Security 2012. Regardless of their name, the presence of any Braviax-related rogue security program on your computer represents a danger to your security and a criminal attempt to steal your money. Braviax-related malware can be removed with a reliable anti-malware program.

Braviax Installation and Effects on an Infected System

Braviax malware will install themselves on the victim's computer with a fake alert claiming to contain an update for the victim's operating system. To do this, Braviax closely mimics a Windows Update and the appearance of Windows' automatic update services, alerts and appearance. Braviax-related rogue security programs will usually be identified with an executable file named with three random letters and change the victim's Windows Registry so that they will be able to start up automatically when Windows is launched, as well as having the ability to create error messages and alerts. While a Braviax infection should be removed with a legitimate anti-virus program, you can stop most of the error messages using any of these registration keys (the last three of these codes are for versions using the '2012' string in the rogue security program's name).

-1147-175591-6550
-2233-298080-3424
-2233-298080-3424
-3425-814615-3990
-9443-077673-5028

File System Details

Braviax may create the following file(s):
# File Name Detections
1. braviax.exe
2. cru629.dat

Trending

Most Viewed

Loading...