Threat Database Fake Error Messages "Testversion" popup

"Testversion" popup

"Testversion" popup is a fake warning message displayed by the rogue anti-virus application Antivirus Doktor. The message reads as follows:

"Testversion. ACHTUNG. Unser Scanner hat zahlreiche Probleme auf lhrem PC gefunden, die sofort nach dem Kauf eines zum Freischalten unseres Programms notwendigen Aktivierungscodes gelost werden konnen. Um den Aktivierungscode zu erwerben, klicken Sie HIER."

This parasite uses this and other tactics to mislead users into believing their computer is infected and in need of anti-viral software, thus persuading the purchase of Antivirus Doktor.

File System Details

"Testversion" popup may create the following file(s):
# File Name Detections
1. %ProgramFiles%\Antivirus Doktor 2009\unins000.exe
2. %UserProfile%\Desktop\AntivirusDoktor2009.exe
3. %ProgramFiles%\Antivirus Doktor 2009\EngineAP.dll
4. %ProgramFiles%\Antivirus Doktor 2009\Antivirus Doktor 2009.exe
5. %ProgramFiles%\Antivirus Doktor 2009\Close.exe
6. %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus Doktor 2009.lnk
7. C:\Documents and Settings\\Start Menu\Programs\Antivirus Doktor 2009\Antivirus Doktor
8. %ProgramFiles%\Antivirus Doktor 2009\ScheduleAP.txt
9. %UserProfile%\Application Data\AntivirusSystem 2009\settings.ini
10. %UserProfile%\Desktop\AntivirusSystem 2009.lnk
11. %SystemDrive%\Documents and Settings\All Users\AVP 2009
12. C:\Documents and Settings\\Start Menu\Programs\Antivirus Doktor 2009\Antivirus Doktor 2009 entfernen.lnk
13. %ProgramFiles%\Antivirus Doktor 2009\definitions\1.dat
14. %UserProfile%\Application Data\AntivirusSystem 2009\
15. %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusSystem 2009.lnk
16. %UserProfile%\Start Menu\Programs\AntivirusSystem 2009.lnk
17. %UserProfile%\Desktop\antivirusDoktor2009
18. C:\Documents and Settings\\Desktop\Antivirus Doktor 2009.lnk
19. 2009.lnk
20. %ProgramFiles%\Antivirus Doktor 2009\unins000.dat
21. %UserProfile%\Application Data\AntivirusSystem 2009\uill.ini
22. %UserProfile%\Start Menu\AntivirusSystem 2009.lnk

Registry Details

"Testversion" popup may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntivirusSystem 2009"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntivirusSystem 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus Doktor 2009_is1

Trending

Most Viewed

Loading...