XPAntivirus
XPAntivirus is a rogue security program that shows false Warning messages. It also shows misleading scan Results. It also uses aggressive advertising and can also install through Trojan exploits.
General information:
| Malware Name: |
XPAntivirus |
| Malware Type: |
Rogue Security Program |
| Company Name: |
XP antivirus |
| Company URL: |
http://www.xpantivirus.com/
|
| Threat Level: |
Medium Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
XP antivirus provides you the software XPAntivirus that will help you to enjoy your system work without any influence of spyware and viruses. XP antivirus has the most advanced update feature that continually improves its Spyware fighting capabilities
on daily basis. XP antivirus is advanced technology designed specially for people, not experts. It is automatically configured out of the box to give you optimal protection with limited interaction so all you need to do is install it for immediate
and ongoing protection. XP antivirus s advanced RealOnGuard technology only alerts users on a true Spyware detection.
Spyware Description:
XPAntivirus is a rogue security program that shows false Warning messages. It also shows misleading scan Results. It also uses aggressive advertising and can also install through Trojan exploits.
Characteristics/Symptoms:
-> It shows false Warning messages. -> It also shows misleading scan Results. -> It can also install through Trojan exploits. -> It also uses aggressive advertising.
Additional information might be found here:
Processes Running:
XPAntivirus.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\XPAntivirus\SysBackup\shlwapi.dll |
401920 |
Application Extension |
| C:\Program Files\XPAntivirus\SysBackup\shlwapi.dll.md5 |
34 |
MD5 File |
| C:\Program Files\XPAntivirus\SysBackup\wininet.dll |
599040 |
Application Extension |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\All Users\Start Menu\Programs\XP antiviru |
| C:\Program Files\XPAntivirus\SysBacku |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SYSTEM\ControlSet001\Services\XPAntivirusFilter |
ImagePath |
| HKEY_LOCAL_MACHINE |
\SYSTEM\ControlSet001\Services\XPAntivirusFilter |
Start |
| HKEY_LOCAL_MACHINE |
\SYSTEM\ControlSet001\Services\XPAntivirusFilter |
Type |
