Monday
Mar082010
And yet more rogue AV software - Virus Protector
A brand new fake AV program Virus Protector is doing the rounds.
Hopefully by now you'll know never to install or run (or click) anything that pops up on your screen telling you there's a problem
File Changes:
RegistryEntries
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Value: Shell
Data: C:\WINDOWS\system32\agaz17mgx.exe
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Value: Shell
Data: C:\WINDOWS\system32\agaz17mgx.exe
Monday, March 8, 2010 at 1:58PM | tagged Malware, Windows, Winiguard, virus protector | Share Article
Reader Comments (2)
Killing Virus Protector: The solution for me was at...
http://www.myantispyware.com/2010/02/20/how-to-remove-virus-protector-uninstall-instructions/
Start at the section that says "Use the following instructions to remove Virus Protector (Uninstall instructions)".
I hope it helps others.
Thanks,
Slob