Cloud AV 2012

By Domesticus in Rogue Anti-Virus Program

Translate To:

Threat Scorecard

Threat Level:	100 % (High)
Infected Computers:	96

First Seen:	November 23, 2011
Last Seen:	August 17, 2022
OS(es) Affected:	Windows

Cloud AV 2012 Image

Cloud AV 2012 is part of a very large family of malware, the FakeScanti family, comprised of a variety of fake anti-virus applications. There are dozens of versions of Cloud AV 2012, dating back to the year 2009. In fact, Cloud AV 2012 may date from before that since it is a direct successor of rogue security applications that were active in 2006. ESG PC security researchers warn against using the rogue anti-virus program Cloud AV 2012; this fake security program has absolutely no real capabilities. Beyond its flashy interface, there are little more than a collection malicious scripts and various Trojans. Cloud AV 2012 is part of a well-known online scam designed to prey on inexperienced computer users by selling them fake security applications. The main danger that lies in a Cloud AV 2012 infection is in this rogue's harmful associations. Most Cloud AV 2012 infections will be associated with a dangerous rootkit or bootkit infection. Depending on the associated rootkit, its removal may be quite difficult and require a specialized tool or the intervention of a computer security professional.

Among the many clones of Cloud AV 2012 are included such fake security programs as Security Guard, Sysinternals Antivirus, Wireshark Antivirus, Milestone Antivirus, BlueFlare Antivirus, WolfRam AntiVirus, OpenCloud Antivirus, OpenCloud Security, Data Restore, OpenCloud AV, Security Guard 2012, AV Guard Online, Guard Online, Cloud Protection, AV Protection Online, System Protection 2012, AV Security 2012, Sphere Security 2012, AV Protection 2011, Super AV 2013.

Table of Contents

How Cloud AV 2012 Affects Its Victims’ Computer System

Like most rogue security applications, Cloud AV 2012 is designed to cause the victim to panic by giving the illusion that a severe malware infection is present on the infected computer system. While this is technically true, the malware infection in question is Cloud AV 2012 itself. Cloud AV 2012 will try to convince its victims to purchase a useless "license" through the use of a credit card at Cloud AV 2012's website. To do this, Cloud AV 2012 will display a constant torrent of alarming error messages and fake security alerts. Cloud AV 2012 will also have a number of detrimental effects on an infected computer system, such as making the infected computer run slowly, crash frequently, or have its settings changed. Cloud AV 2012 may use Trojans to block access to the Internet, disable known security applications, and change your files settings so that they will be hidden from view. An inexperienced computer user, who's faced with all of these problems at once, may be predisposed to believing Cloud AV 2012's lies. Do not become a victim! Remove Cloud AV 2012 at once.

SpyHunter Detects & Remove Cloud AV 2012

Cloud AV 2012 Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

Cloud AV 2012 may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	Cloud AV 2012v121.exe	420b6e9c65701b4b6720f25762f6186d	43
Name: Cloud AV 2012v121.exe MD5: 420b6e9c65701b4b6720f25762f6186d Size: 2.8 MB (2801664 bytes) Detections: 43 Type: Executable File Path: %APPDATA%\XHHH5sQQJ7dK8RZ Group: Malware file Last Updated: November 24, 2011
2.	66C.exe	535b08b0737a0524b133be6401338383	12
Name: 66C.exe MD5: 535b08b0737a0524b133be6401338383 Size: 286.2 KB (286208 bytes) Detections: 12 Type: Executable File Path: %APPDATA%\Microsoft\8AF2 Group: Malware file Last Updated: November 24, 2011
3.	Cloud AV 2012v121.exe	b199c92af7b4a1f1427f7ebff90e0615	5
Name: Cloud AV 2012v121.exe MD5: b199c92af7b4a1f1427f7ebff90e0615 Size: 2.79 MB (2799616 bytes) Detections: 5 Type: Executable File Path: %APPDATA%\LycA1uvD2b4m5Q6 Group: Malware file Last Updated: August 17, 2022
4.	502F9.exe	a206e763d2bbed0eee677180c0ebe359	2
Name: 502F9.exe MD5: a206e763d2bbed0eee677180c0ebe359 Size: 172.54 KB (172544 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\AED99 Group: Malware file Last Updated: November 24, 2011
5.	lvvm.exe	430ab1341e367ee43e2c57e9accd7be2	2
Name: lvvm.exe MD5: 430ab1341e367ee43e2c57e9accd7be2 Size: 188.41 KB (188416 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\13DB7 Group: Malware file Last Updated: November 24, 2011
6.	%Local_AppData%\dwme.exe
Name: %Local_AppData%\dwme.exe Type: Executable File Group: Malware file
7.	%Windows%\system32\[RANDOM CHARACTERS].exe
Name: %Windows%\system32\[RANDOM CHARACTERS].exe Type: Executable File Group: Malware file
8.	%TempDir%\dwme.exe
Name: %TempDir%\dwme.exe Type: Executable File Group: Malware file
9.	%SystemDir%\Cloud AV 2012v121.exe
Name: %SystemDir%\Cloud AV 2012v121.exe Type: Executable File Group: Malware file
10.	%SYSTEM%\Cloud AV 2012v121.exe
Name: %SYSTEM%\Cloud AV 2012v121.exe Type: Executable File Group: Malware file
11.	%PROGAM_FILES%\24245\lvvm.exe
Name: %PROGAM_FILES%\24245\lvvm.exe Type: Executable File Group: Malware file
12.	%AppData%\FCE03\0FD4B.exe
Name: %AppData%\FCE03\0FD4B.exe Type: Executable File Group: Malware file
13.	%ProgramFiles%\03F0D\lvvm.exe
Name: %ProgramFiles%\03F0D\lvvm.exe Type: Executable File Group: Malware file
14.	%AppData%\dwme.exe
Name: %AppData%\dwme.exe Type: Executable File Group: Malware file
15.	%PROGAM_FILES%\LP\BAD6\C29.exe
Name: %PROGAM_FILES%\LP\BAD6\C29.exe Type: Executable File Group: Malware file
16.	%Documents and Settings%\[USERNAME]\Application Data\svhostu.exe
Name: %Documents and Settings%\[USERNAME]\Application Data\svhostu.exe Type: Executable File Group: Malware file
17.	%ProgramFiles%\LP\4B7F\027.exe
Name: %ProgramFiles%\LP\4B7F\027.exe Type: Executable File Group: Malware file
18.	%AppData%\ldr.ini
Name: %AppData%\ldr.ini Group: Malware file
19.	%Documents and Settings%\[USERNAME]\Application Data\[RANDOM CHARACTERS]\
Name: %Documents and Settings%\[USERNAME]\Application Data\[RANDOM CHARACTERS]\ Group: Malware file
20.	%AppData%\FCE03\3F0D.CE0
Name: %AppData%\FCE03\3F0D.CE0 Group: Malware file
21.	%ProgramFiles%\LP\4B7F\2.tmp
Name: %ProgramFiles%\LP\4B7F\2.tmp Type: Temporary File Group: Malware file
22.	%Programs%\Cloud AV 2012\Cloud AV 2012.lnk
Name: %Programs%\Cloud AV 2012\Cloud AV 2012.lnk Type: Shortcut Group: Malware file
23.	%DesktopDir%\Cloud AV 2012.lnk
Name: %DesktopDir%\Cloud AV 2012.lnk Type: Shortcut Group: Malware file
24.	%Documents and Settings%\[USERNAME]\Local Settings\Temp\[random].tmp
Name: %Documents and Settings%\[USERNAME]\Local Settings\Temp\[random].tmp Type: Temporary File Group: Malware file
25.	%Documents and Settings%\[USERNAME]\Desktop\Cloud AV 2012.lnk
Name: %Documents and Settings%\[USERNAME]\Desktop\Cloud AV 2012.lnk Type: Shortcut Group: Malware file
26.	%TempDir%\1.tmp
Name: %TempDir%\1.tmp Type: Temporary File Group: Malware file
27.	%ProgramFiles%\LP\4B7F\4.tmp
Name: %ProgramFiles%\LP\4B7F\4.tmp Type: Temporary File Group: Malware file
28.	%Temp%\8.tmp
Name: %Temp%\8.tmp Type: Temporary File Group: Malware file
29.	%AppData%\[RANDOM CHARACTERS]\Cloud AV 2012.ico
Name: %AppData%\[RANDOM CHARACTERS]\Cloud AV 2012.ico Group: Malware file
30.	%Documents and Settings%\[USERNAME]\Start Menu\Programs\Cloud AV 2012\
Name: %Documents and Settings%\[USERNAME]\Start Menu\Programs\Cloud AV 2012\ Group: Malware file
31.	%AppData%\LUUJ1wscH0aTNzF\Cloud AV 2012.ico
Name: %AppData%\LUUJ1wscH0aTNzF\Cloud AV 2012.ico Group: Malware file
32.	%ProgramFiles%\LP\4B7F\3.tmp
Name: %ProgramFiles%\LP\4B7F\3.tmp Type: Temporary File Group: Malware file
33.	%Desktop%\Cloud AV 2012.lnk
Name: %Desktop%\Cloud AV 2012.lnk Type: Shortcut Group: Malware file

Registry Details

Cloud AV 2012 may create the following registry entry or registry entries:

Regexp file mask

%AppData%\iexplore.exe

%AppData%\svhostu.exe

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"

HKEY_CURRENT_USER\Software\Cloud AV 2012

HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\C0AB6693AB3202B4B9D95716ED5CE4A6\SourceList

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Cloud AV 2012

Threat Scorecard

EnigmaSoft Threat Scorecard

How Cloud AV 2012 Affects Its Victims’ Computer System

SpyHunter Detects & Remove Cloud AV 2012

Cloud AV 2012 Video

File System Details

Registry Details

1 Comment

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen