Win7 AV
Win7 AV is a fake anti-virus application. Win7 AV can spread via Trojans, malicious websites or fake online scanners. Once Win7 AV is inside a machine it will launch a scanner and report numerous malware infections followed by alarming security alerts and pop-ups. Then Win7 AV will prompt a victim to purchase its 'full version' in order to remove all the detected malware infections. Never purchase Win7 AV; it is a useless application that should be removed upon detection.
File System Details
Win7 AV may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | VmDetectLibrary.dll | |
| 2. | sbhostcl.dll | |
| 3. | Win7 AV.exe | |
| 4. | svhostesl.dll | |
| 5. | Win7Browser.exe | |
| 6. | svhostqt.dll |
Registry Details
Win7 AV may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
