ContraVirus.1

Description: Rogue Security Program
Risk Level: High
Date of First Occurence: Monday, April 28, 2008
Software Developer: (unknown)
Brief Info: Rogue/Suspect Anti-Spyware Product "Rogue/Suspect" means that these products are of unknown, questionable, or dubious value as anti-spyware protection.
Removal: This threat can be removed using "Spyware Terminator"

REMOVER SPYWARE »

Geographical Distribution of Threat "ContraVirus.1"

Threat Info

View All

Detected Items

  1. Detected Files:
  2. Detected Files with variable Filenames: MD5: BC0C95A32B3B1312C6DA4020F389EE34 Size: 7612520 %TEMP%\sa1.exe %TEMP%\saBB.exe %TEMP%\saB.exe %TEMP%\saA.exe %TEMP%\19A.exe %USERPROFILE%\Local Settings\Temp\160.exe

Detecting items list:

  1. Files by MD5 MD5: BC0C95A32B3B1312C6DA4020F389EE34 Size: 7612520
  2. Files by CLSID or Name CLSID=5AF53372-266A-11DC-874D-879E56D89593 CLSID=99A753C6-E429-46BD-989E-DD4A21CD059D CLSID=D2C1986A-FBEC-4472-AABF-6D42F08DBC8E CLSID=DBE5BEE8-F032-11DB-826A-C4BB56D89593 CLSID=E6B4AB50-F423-4EE6-9839-B35DCFCDFA49
  3. Registry Keys HKLM\SOFTWARE\Classes\AppID\ContraVirusPro.EXE HKLM\SOFTWARE\Classes\AppID\{7C11C36C-2AE0-4489-9B09-A6129139D52D} HKCR\AppID\{7C11C36C-2AE0-4489-9B09-A6129139D52D} HKLM\SOFTWARE\ContraVirus HKCR\AppID\ContraVirusPro.EXE

« Go to Software Database