Changes

Internet Security 2012 Virus

655 bytes added, 22:09, 17 December 2011
/* Pathology */
The following lines were added (+) and removed (-):
Internet Security 2012 starts a pseudo scan process and then generates and shows fake messages about viruses, Trojans and worms detected on the computer. The detected viruses cannot be deleted unless the program license is purchased.[[File:InetSec2012_01.jpg]][[File:InetSec2012_02.jpg]]During the installation XP Antivirus 2012 copies the following files to the hard drive: %AllUsersProfile%\Application Data\157850g1p046c522p184r5dtv4q8 %AppData%\157850g1p046c522p184r5dtv4q8 %Temp%\157850g1p046c522p184r5dtv4q8 %UserProfile%\Templates\157850g1p046c522p184r5dtv4q8 %UserProfile%\Local Settings\Application Data\%random%.exeThere is typically a single executable, however, the name is inconsistent but tends to be three characters in the filename before the extension.  Examples:There is typically a single executable, however, the name is inconsistent but tends to be three characters in the filename before the extension.  Examples of %random%.exe:
Bureaucrat, administrator
16,192
edits