1. Program description
AntivirusGT is a type of misleading application that pretends to be legitimate security software, such as an antivirus scanner or registry cleaner (Rogue Security Software). The author also created the following rogue software: Antivirus7.
2. Actions
Once the scan is started AntivirusGT generates and shows fake messages about viruses, Trojans and worms detected on the computer. Still the detected viruses cannot be deleted unless the program license is purchased.
3. Files
During the installation AntivirusGT copies the following files to the hard drive:
%ProgramFiles%\AVGT\AntivirusGT.exe
%AllUsersProfile%\Start Menu\AVGT\AntivirusGT.lnk
%AllUsersProfile%\Start Menu\AVGT\Uninstall.lnk
%UserProfile%\Desktop\AntivirusGT.lnk
4. System registry
In order to function normally AntivirusGT creates the following branches in the system registry:
HKEY_CURRENT_USER\software\EVA50C
HKEY_CURRENT_USER\software\WinV2
HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Run, "AVGT"
5. Screenshots of the program
| 
0 
2010 Jul 09 09:35
