Expert AntiVirus
Expert AntiVirus is a rogue security program that provides no protection against adware or spywares. It shows false reports of updating ref database and false warnings. It can also be downloaded through some Trojan exploits.
General information:
| Malware Name: |
Expert AntiVirus |
| Malware Type: |
Rogue Security Program |
| Company Name: |
EXPERTAntivirus |
| Company URL: |
http://expertantivirus.com/
|
| Threat Level: |
Moderate Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
EXPERTAntivirus provides you the software Expert AntiVirus that is an antispyware protection. It carries out a quick scan of the registry and the programs currently in use. If the first stage of the scan goes OK, the system switches on to the second
stage. It deep scans the registry, memory, all files and folders, cookies and Windows Hosts. ExpertAntivirus keeps tracking the activity of the suspicious files both throughout the scanning process and after it.
Spyware Description:
Expert AntiVirus is a rogue security program that provides no protection against adware or spywares. It shows false reports of updating ref database and false warnings. It can also be downloaded through some Trojan exploits.
Characteristics/Symptoms:
-> Shows false results and warning messages. -> It can also be installed through some Trojan exploits -> Poor scan reporting. -> Falsely reports updating ref database.
Additional information might be found here:
Processes Running:
ExpertAntivirus.EXE
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\ExpertAntivirus\activex.db |
52092 |
Data Base File |
| C:\Program Files\ExpertAntivirus\registry.db |
296375 |
Data Base File |
| C:\WINDOWS\wincom137.dll |
32816 |
Application Extension |
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\ExpertAntivirus\Language |
| C:\Program Files\ExpertAntivirus\Log |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CLASSES_ROOT |
\Interface\{D59B2DD5-0609-4BDC-AB47-A9A28ABC482A} |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\CLSID\{D7ABE914-B8CF-4602-9145-6BDAAEDA21AA} |
AppID |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\ExpertAntivirus.Addin |
|
