Thursday, 12 November 2009


Another day, another faked anti-virus program. Today it's called AntiAID and claims to detect a bunch of malware on a clean computer:

AntiAid screnshot

I've pasted a FreeFixer log below and highlighted the malware files in red:
FreeFixer v0.49 log
Operating system: Windows XP Service Pack 2
Log dated 2009-11-12 10:22

Registry Startups (3 whitelisted)
HKCU\..\Run, 8enyqcv1.exe = C:\WINDOWS\system32\8enyqcv1.exe
HKCU\..\Run, AntiAID = C:\Program Files\AntiAID Software\AntiAID\AntiAID.exe -min

Processes (20 whitelisted)
C:\Program Files\FreeFixer\freefixer.exe
C:\Program Files\AntiAID Software\AntiAID\AntiAID.exe

Recently created/modified files (29 whitelisted)
-123 minutes, c:\Program Files\AntiAID Software\AntiAID\AntiAID.exe

End of FreeFixer log

No comments:

Post a Comment