MenaceRescue
MenaceRescue is a rogue security program that shows false Warning messages. It also shows misleading scan Results. It also uses aggressive advertising and can also install through Trojan exploits.
General information:
| Malware Name: |
MenaceRescue |
| Malware Type: |
Rogue Security Program |
| Company Name: |
AVSystemCare |
| Company URL: |
http://menacerescue.com/
|
| Threat Level: |
Elevated Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
AVSystemCare provides you the software MenaceRescue that guarantees your safety online proving reliable non-stop protection of your computer thanks to unique combination of features the most effective ones to ensure the best antivirus defense of PC.
Spyware Description:
MenaceRescue is a rogue security program that shows false Warning messages. It also shows misleading scan Results. It also uses aggressive advertising and can also install through Trojan exploits.
Characteristics/Symptoms:
-> It shows false Warning messages. -> It also shows misleading scan Results. -> It can also install through Trojan exploits. -> It also uses aggressive advertising.
Additional information might be found here:
Processes Running:
pgs.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\MenaceRescue\Dat\pv.dat |
9 |
DAT File |
| C:\Program Files\MenaceRescue\Dat\sr.log |
133 |
Text Document |
| C:\Program Files\MenaceRescue\LA\lapv.dat |
3 |
DAT File |
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\MenaceRescue\Addon |
| C:\Program Files\MenaceRescue\Bas |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\MenaceRescue\Settings |
BlockDomainPopupLimit |
| HKEY_CURRENT_USER |
\Software\MenaceRescue\Settings |
ComboCountry |
| HKEY_CURRENT_USER |
\Software\MenaceRescue\Settings |
ComboState |