WinAntiVirus Pro 2006

It is a software that purports to scan and detect malware or other problems on the computer, but which attempts to dupe or badger users into purchasing the program by presenting the user with intrusive, deceptive warnings and/or false, misleading scan results. It includes Elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to our system, such as reconfiguring our browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain. These new add-ons and components may block or redirect our preferred network connections, and can negatively impact our computer’s performance and stability. Elevated threats may also collect, transmit, and share potentially sensitive data without adequate notice and consent.0

General information:

Malware Name:	WinAntiVirus Pro 2006
Malware Type:	Rogue Security Program
Company Name:	WinSoftware
Company URL:	http://winantivirus.com/
Threat Level:	Elevated Risk
Operating System:	WIN XP
Installation Type:	Installed through EXE
Operation:	Time of After Installation.

Company Description:

WinSoftware is a world-class business Services Company focused on delivering first-class security solutions to a wide range of clients. Its software is mostly designed to help individuals, small businesses and educational organizations to secure their computers from different threats coming from all sides and growing in number and complexity. It provides a complementary range of products and services that enable every customer to choose the product that suits him/her best. Its solutions include virus protection, content and advertising filtering, firewall solutions, optimization software and more. The company has a strong team of qualified specialists, programmers, testers, engineers, support and call center representatives who complement each other to provide superb products and services

Spyware Description:

It is a software that purports to scan and detect malware or other problems on the computer, but which attempts to dupe or badger users into purchasing the program by presenting the user with intrusive, deceptive warnings and/or false, misleading scan results. It includes Elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to our system, such as reconfiguring our browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain. These new add-ons and components may block or redirect our preferred network connections, and can negatively impact our computer’s performance and stability. Elevated threats may also collect, transmit, and share potentially sensitive data without adequate notice and consent.0

Characteristics/Symptoms:

    -> False positives work as good to purchase -> False scan results -> Uses inadequate scan/detection scheme -> Uses out of date ref database0

Additional information might be found here:

	Search at Google for WinAntiVirus Pro 2006
	Search at Bing for WinAntiVirus Pro 2006
	Search at Yahoo for WinAntiVirus Pro 2006

Processes Running:

WinAV.exe

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\Program Files\WinAntiVirus Pro 2006\img\button.gif	2738	GIF Image
C:\Program Files\WinAntiVirus Pro 2006\img\button2.gif	2497	GIF Image
C:\Program Files\WinAntiVirus Pro 2006\img\header.gif	3915	GIF Image

Folder information Created after Installation:

Folder Location
C:\Program Files\WinAntiVirus Pro 2006
C:\Program Files\WinAntiVirus Pro 2006\AWBase

Registry information Created after Installation: