In terms of detection, "antivirus" is also very "good" because it can detect viruses that can not be detected by the antivirus program in general. But do not be fooled because of all the warnings that appear are false. In the end, we are asked to send some money to get its full version in order to remove the virus "fake" it.
Fake antivirus program, or better known as scareware, are now in the tens of types. Of the many scareware programs that spread, one of which is Gen.variant.Zusy.905 (G Data antivirus detection results) or better known as the Windows Basic Antivirus. The program will be disguised as a fake antivirus tool. Presented a fairly complete feature, such as Antivirus, Firewall, Anti-Phishing, Autorun Manager, Process Control, Service Manager, and other features.
FileVirus
This virus will come in the form of a setup.exe file using the
WinRar icon with a size of 2.009KB. If the file is extracted will contain files with names 2321670y1bir91x.exe with a size of 1954KB and in the file (2321670y1bir91x.exe) will have the main file as a trigger to filesystemscan.exe name that has been encrypted.
Virus Genes master file. variant.Zusy.905
At the time the file is executed, it will create some files to be stored in the directory:
• C: Documents and SettingsAdminApplication DataProtector-pma. exe
• C: Documents and SettingsAdminApplication Dataresult.db
• C: Documents and Settings% user% DesktopWindows Basic
by PCplus
