Fake Anti Spyware.DoctorAntiVirus2008 - Spyware Detector

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Fake Anti Spyware.DoctorAntiVirus2008

Fake Anti Spyware.DoctorAntiVirus2008 Technical Details

Category

Fake Anti Spyware

Discovered

7/2/2008 16:01:00 PM

Modified

7/2/2008 17:49:00 PM

Threat Level

Critical

Description

Doctor Antivirus 2008 is a new Fake Anti Spyware. Doctor Antivirus 2008 is extremely dangerous malware program that damage to the user PC and cause system crash and money loss. Doctor Antivirus 2008 can be installed through system security holes or using Trojan horses. After installation Doctor Antivirus 2008, it bombard to user pc with annoying security warnings, alert messages, pop-up and shows the misleading spyware scan results.

Summary

The hosts file was updated with the following url-to-ip mappings : n/a
The following http urls were started :
doctor-antivirus.com
404.hqhost.net
bp.specificclick.net
Generated smtp traffic : n/a
There was a new connection established with a remote IRC Server : n/a
The Following Hidden Entries Created : n/a
The following internet connection was established: n/a

Processes

antvr.exe

Drivers

N/A

Folders created

N/A

Browsed Sites

http://doctor-antivirus.com/promo/

When the Fake Anti Spyware is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\startup\update.exe			e6cbfdbc23b686ea366502c65f23c817	27648
..\system\svchost.exe			e6cbfdbc23b686ea366502c65f23c817	27648
..\antvr.exe	1.0.0.1	TODO:	c4a11a8601ab977f041c222b21213418	394240
..\at.exe	1.0.0.1	Doctor Antivirus 2008	02b53bb859a78d9c12e5f549baf54a79	125952
..\av2009install.exe			cd5a66dea5c13954fbf5fdc5950bf1a8	135680
..\antvr.exe	1.0.0.1	TODO:	c4a11a8601ab977f041c222b21213418	394240
..\at.exe	1.0.0.1	Doctor Antivirus 2008	02b53bb859a78d9c12e5f549baf54a79	125952
..\install.exe			e36733feac304db7240122e86e145cc8	348100
..\netempresa.exe			69ea4361617b860927cf66ab60ddf67e	213868
..\ultimatevideocodec-04.exe			745cdbfd337b3762b7d3e891580752fd	53760
..\video1.exe			7db17b593aaaf677688bed5917ee167c	67584
..\temp\clx_133.bak			47ec99067c7156499ab4245fec08e6c4	4516
..\startup\update.exe			e6cbfdbc23b686ea366502c65f23c817	27648
..\svchosts.exe			a57f168996c70ebb9a8e11a67cdaac6e	51
..\sysrwmi.exe			d6a381f6dc80d1c672661706526de675	28160
..\788877\788877.dll	1.0.0.1		3bfd6a4cde0c66a9cef008aadf9d6b66	15360
..\cbevtsvc.exe			7db17b593aaaf677688bed5917ee167c	67584
..\clbdll.dll
..\drivers\clbdriver.sys
..\xml2u32d.dll	1.0.352.7	Microsoft Corporation	cc0792b4ad5da69e366e154154da38e3	47320

When the Fake Anti Spyware is executed, it creates the following Registry entries:

•	..\software\classes\clsid\{72a128e0-2240-40c8-9e92-5387d64f839e}
•	..\software\classes\clsid\{7bc9c2e2-73a6-4fcf-b73d-cbaa20b31c9b}
•	..\software\classes\typelib\{6d0111e3-3060-4d23-b2bc-42ed86cbe9a3}
•	..\software\classes\wrte.document.1\uid\frame12\"@733130"
•	..\software\classes\xmllib.xmldp
•	..\software\classes\xmllib.xmldp.1
•	..\software\clsid\{52746403-3260-5412-3350-99ca3230262a}
•	..\software\doctor2008
•	..\software\microsoft\windows nt\currentversion\clbimagedata
•	..\software\microsoft\windows\currentversion\run\"doctor antivirus 2008"
•	..\system\controlset001\control\safeboot\minimal\clbdriver.sys
•	..\system\controlset001\control\safeboot\network\clbdriver.sys

Snapshot

Recommendation to remove Fake Anti Spyware.DoctorAntiVirus2008

Spyware Detector can remove Fake Anti Spyware.DoctorAntiVirus2008, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat