Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 65
First Seen: July 24, 2009
Last Seen: July 31, 2022
OS(es) Affected: Windows

VirusTrigger, or Virus Trigger, is a rogue anti-spyware program and clone of Virus Responde Lab 2009. VirusTrigger is often installed by Trojan Zlob bundled in a fake video or audio codec download. Once infected, the user may be bombarded with fake system notifications stating that the user's computer is infected with spyware. VirusTrigger's fake popups may read:

"System Alert!

Your system might be infected with malicious software that may impact the performance of your computer. Click the icon for a free scan to detect any active spyware applications."


Your computer is being attacked from Internet. It

could be a password-stealing attack, a trojan-

drooper and so on.


Attack from:, port 15589

Attacked porn: 10554

Threat: Exploit.W97.Ginwui.Gen"

If the user clicks on the icon for a free scan, he/she will be redirected to VirusTrigger's website ( and urged to purchase VirusTrigger's full version to remove supposed spyware infections.

In addition, as soon as VirusTrigger's trial version is launched, it may start a fake system scan and then generate fake scan results. VirusTrigger's scan results may suggest that legitimate files found in the user's computer system are corrupt.

VirusTrigger's popups are also known to be displayed at various websites. VirusTrigger may cause computer slowdowns.


15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AVG SpyTrooper.AB
Ikarus Virus.Win32.Alman
AhnLab-V3 Win-Trojan/Spyshe.412672
Antiy-AVL Trojan/win32.agent.gen
eTrust-Vet Win32/SpySheriff
McAfee-GW-Edition Heuristic.LooksLike.Win32.Suspicious.C
AntiVir ADSPY/SpyShe.A.10.A
DrWeb Adware.Spysheriff
F-Secure Rogue:W32/SpySheriff.E
Comodo UnclassifiedMalware
Sophos Mal/Generic-A
BitDefender Adware.Spysheriff.J
ClamAV PUA.Packed.ASPack
Avast Win32:Lager-U
Symantec SpySheriff

SpyHunter Detects & Remove VirusTrigger

File System Details

VirusTrigger may create the following file(s):
# File Name MD5 Detections
1. SpySheriff.exe c899f93e8b753fedd068ef3fe2edb0fd 29
2. AntiVirusTrigger..exe a1ece65c7dabc196845007aedb5634a3 5
3. install_5344_MHw0MHwxMDAwMDAwMDAwfHx8fHx8fHw_.exe b45b1f8c52e2c661730bdd6670787d42 3
4. AvirTr.exe a48be4c2d02b2239eef03e3ba5fc8014 0
5. AvirTrWarning.dll a0c02530ec6c7701c9872d0e1eac8495 0
6. VirTriggerWarning.dll aa7d02efbb315b7e41f6e2019bad61c3 0
7. vrt_setup[1].exe 842bac1595a29cee56afcbc3e7c3a469 0
8. VirusTriggerBin.exe a9a50fdde7922847b128482536e68cc2 0
9. vrt_setup[1].exe 01a4a1fee166d2eaba14374cc2e709d5 0
10. VirusTriggerBinWarning.dll 1f05a3f27df350a14a5369212858be82 0


VirusTrigger may create the following directory or directories:



The following cookies were found:



Most Viewed