ContraVirus
ContraVirus is a rogue spyware application that poses as a legitimate anti-spyware program.[1] The application uses a false scanner to force computer users to pay for the removal of non-existent spyware items. It may also be known as ExpertAntivirus.[2][3]
Methods of infection[edit]
ContraVirus may be downloaded as a trojan horse, along with possible other software. Typically, it may be installed by the SmitFraud trojan.[4]
Symptoms of infection[edit]
ContraVirus has been known to display fake messages stating that a user's computer is infected with spyware. It may also install the file wincom27.dll, located in C:\WINDOWS\ and ext32inc.dll located in C:\WINDOWS\system\, in order to persuade a user to purchase the software.[5] Traditionally, a user will see Contravirus running a "scan" of their computer, at which time a user will be prompted to purchase the Contravirus software in order to remove the threat. It may also hijack the user's browser and install a toolbar.[6]
95, 98, Me, NT, XP, Server 2000, 2000, Server 2003, Vista, Server 2008, 7 and Server 2008 R2 are operating systems capable of becoming infected.
See also[edit]
References[edit]
- ↑ "W32/Contra.worm". Archived from the original on 2009-09-01. Retrieved 2008-08-20. Unknown parameter
|url-status=ignored (help) - ↑ "Risk Detected".
- ↑ http://www.ca.com/securityadvisor/pest/pest.aspx?id=453113271[dead link]
- ↑ "What is a Trojan Horse? Definition from WhatIs.com". Security. Retrieved 2023-12-11.
- ↑ "How to Remove Contravirus (Removal Instructions) - Spyware and Malware Removal Guides Archive".
- ↑ Vincentas (12 October 2012). "ContraVirus in SpyWareLoop.com". Spyware Loop. Retrieved 28 July 2013.
External links[edit]
This article "ContraVirus" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:ContraVirus. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
