12345

1/07/2011

Fake antivirus SW disguised Adobe Flash Player's installation file.

1. Introduction

Recently, fake anti-virus SW disguised as an "Adobe Flash Player" has been reported.
Upon installed this malicious program, it can show false infection information of normal file and induce user to pay for fix them.
To avoid from this malicious software, users need to be careful on using and downloading programs on internet.

2. Spreading path and symptoms of infection

Downloaded fake anti-virus program is masqueraded as an Adobe Flash Player's installation file and can induce user to recognize normal installation file.


Upon executed Adobe_FlashPlayer_10.1.305.31.exe, it will show fake diagnosis screen and warning screen looked like by Microsoft.

It induces user to click "Apply action" button for removing security threats, and to click "Apply action" button will install fake anti-virus software.


After completed installation, reboot is needed.


After rebooted, window desktop will be changed "Protected Mode" and it will perform system scan.
Currently, this program is designed to induce general users to recognize normal program with using its name "Windows Optimization Center".


After the system scan is completed, it will show fake result screen to user.


It induces user to buy license and pay for fixing fake diagnosed files.


<Screen for purchasing license>

<Screen for payment>

Executing Adobe_FlashPlayer_10.1.305.31.exe will create certain files on following path.

[Generated files]
(User account folder)C:\Documents and Settings\Administrator\Application Data\protect.exe

- (User account folder) is C:\Document and Settings\(User account)\Application Date on general.

Furthermore, it can fix registry value for running itself on boot.

[Register registry value for running on boot]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
- Value name : "Windows Optimization Center"
- Value data : "C:\Document and Settings\Administrator\Application Data\protect.exe"

[HKEY_CURRENT_USER\software\Microsoft\Windows NT\CurrentVersion\Winlogon]
- Value name : "Shell"
- Value data : "C:\Document and Settings\Administrator\Application Data\protect.exe"

3. How to prevent

This kind of fake anti-virus program can show fake infected screen and induce user to pay for fixing them.
To use PC safely from security threats of these malicious files, we recommend following "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
5. Execute downloaded file after scan with anti-virus SW.

INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function with “nProtect Anti-Virus/Spyware” for detecting such as malicious file stated above and runs responding system against various security threats.

Diagnosis name

 - Trojan/W32.FakeAV.2512384

82 comments:

  1. I do believe that we should not install free and fake antivirus software in our system. I would better suggest to go for some good anti spyware.

    ReplyDelete
  2. This is the place the main discharge is regularly an antivirus trial adapted to give selective clients an essence of the capacities before building the whole bundle. Think about these kind of antivirus trial programs as irregular examples or assessment forms that help clients separate and request advancement in those particular fields that really affect their business.https://purr-dev.lib.purdue.edu/members/1708/blog/2016/09/mcafee-antivirus-programs-for-business-or-personal-uses

    ReplyDelete
  3. I do believe that computer users should not use free antivirus software which doesn't come with full functionalities. Using a paid antivirus guarantees to protect your PC from unknown viruses, spyware and other internet threats.

    ReplyDelete
  4. If you dont like antiviruses, or prefer any other apps to antivirus, you should take a closer look at http://spying.ninja/how-to-detect-spyware-on-android/

    ReplyDelete
  5. I encourage you to try this hoverwatch app. It proved to be very efficient.

    ReplyDelete
  6. Adobe Flash Player is the good one which helps you to play video online
    Techubi

    ReplyDelete
  7. It is my first visit to your blog, and I am very impressed with the articles that you serve. Give adequate knowledge for me. Thank you for sharing useful material. I will be back for the more great post. fake college diploma

    ReplyDelete
  8. This article will furnish you with the means required to execution test any antivirus programming suites that you might be keen on obtaining to keep running on your PC.antivirus program

    ReplyDelete
  9. Excellent article. Very interesting to read. I really love to read such a nice article. Thanks! keep rocking. Download Webroot

    ReplyDelete

  10. We have a three-part technology to defend against chargebacks. Using our technology frees you up to concentrate on your business and keeps up your merchant account so that you can grow your business.
    chargeback management


    adobe support number – Adobe is an American multinational software company which is well known for its creation of multimedia and creativity software products.
    adobe support number

    www.mcafee.com/activate - Activate Your McAfee Retail card by simply visiting our website mcafee.com/activate and Get Started with McAfee Security.
    www.mcafee.com

    ReplyDelete
  11. The two test consequences of intrigue are the detection and removal comes about, visit my web site

    ReplyDelete
  12. If you are having one of such question and looking for an answer then do not worry. We are here to help you. You can call the Norton Support team and we will provide you with an on-call technician. The technician will take your issue and help you through by providing you troubleshooting steps.

    ReplyDelete
  13. Epson or Seiko Epson Corporation is a Japanese Company which is one of the world’s largest of Printers and imagining related equipment. With growing demand for a printing device, the technology around printing products is increasing too. This what Epson Printer deliver with their new and upgraded Printers.pson printer support

    ReplyDelete
  14. Norton – Norton Antivirus is a security software tool developed by the Symantec, it offers the next-gen security to the users. It has a wide range of products like Norton Internet Security, Norton 360, Norton Antivirus, Norton Utilities and many others. The company developed a complete tool which can be used as an Antivirus,

    ReplyDelete
  15. Brother is another popular Printer company which manufactures advanced printing device and accessories for both personal and business use. It is a Japanese company which sells their products both online and offline, from stores.

    ReplyDelete
  16. Norton Antivirus 1-800-384-0231 is one of the best Security Antivirus product which can completely protect your digital online life. This Antivirus has the highly strong strengthen and enhanced features like Email protection, a secure firewall, PC optimization tool and parental control that can help you in protecting from the internet spyware, viruses, and internet hackers. Now you can securely surf the internet with the Norton Antivirus. To activate Norton product, you can visit norton.com/activate.
    Norton.com/Setup

    ReplyDelete
  17. Norton has aptly earned the reputation of “King of Antivirus”. Millions of people across the globe rely on Norton products and services. This brand is widely recognized for providing the best of product and services to their esteemed consumers. Products offered by Norton are built with the high-quality security benefits which always result in better protection.
    Norton.com/setup

    ReplyDelete
  18. Founded in the year 1975 by Bill H. Gates and Paul Gardner Allen, Microsoft has become the leading tech business across the globe. Since it was established, the primary focus of this company has been software, however, with Surface tab, this has somewhat changed. Microsoft is most well-known for its Operating System - Windows. Also, its productivity suite- Office - is the most popular in the world. For decades, Microsoft has been leading the tech industry. However, in order to compete, it keeps on adding new features, tools, products to its Office suite. In the present world, Microsoft is well-aware about the need for small businesses and start-ups to grow. Therefore, it has launched Office suites for small and medium-sized companies as well. People from all work setups, students, teachers, freelancers, etc use Microsoft Office programs and services to do their day-to-day tasks. You can activate the product on office.com/setup.
    office.com/setup

    ReplyDelete
  19. Everybody who has a computer or knows how to work on one has used Microsoft Office at some point or the other. For most of the people, Microsoft office has been there to help them throughout their digital lives. From writing college essays to making presentations, to creating emails on outlook to calculating budget on Excel, Microsoft Office has been there. The popularity of Microsoft Office is so high that over a billion people use the Microsoft productivity suite.  Office 2016, Office 2013,Office 2010,Office 2007,and Office 2003 are some of the desktop versions of Microsoft Office.
    Office.com/setup

    ReplyDelete
  20. For a company to grow and develop, it needs to implement avant-garde technology. Owing to the benefits offered by Microsoft Office, a majority of businesses and offices use the productivity suite developed by Microsoft. Microsoft, a famous name in the tech world, launched the first Office suite in 1990. Since then several versions like Office 365, Office 2016, Office 2013, Office 2010, Office 2007, and Office 2003 have been released. Collaboration on Office apps is like a walk in the park. The Office apps are not only user-friendly but they also contain built-in help tools which can be conveniently accessed.

    office.com/setup

    ReplyDelete
  21. Garmin Express is an application which provides
    the ability to access, control and manage all other Garmin
    devices from one place.Garmin.com/express

    ReplyDelete
  22. Let's get Started with Norton Security as we are here
    to get you the easiest way to Setup Norton Security. Feel
    free to contact us if you need any help.www.norton.com/setup

    ReplyDelete
  23. Webroot.com/safe – Activate Your Webroot Com Safe on your laptop, PC, Smartphone etc & secure your devices. Let’s Get Started with Webroot Safe at www.Webroot.com/safe & Activate Webroot Safe.Webroot.com/safe

    ReplyDelete
  24. AVG Retail Registration at avg.com/retail and register your
    AVG Product. Let's Get Started with www.avg.com/retail in order
    to Activate AVG. ... www.avgcomretail.xyz is an independent support
    provider on On-Demand.www.avg.com/retail

    ReplyDelete
  25. This is one of the great informative post and wonderful article i come across . very good and positive approach too. Thank you for sharing this wonderful post with great info.
    norton.com/setup | norton.com/setup | office.com/setup

    ReplyDelete
  26. Today, in any case, that has been offered regard for and Norton currently has its execution leveled out for all PC clients. Windows USA

    ReplyDelete
  27. You can download, install and manage your version of the product on your system from the link office.com/myaccount. My account allows you to change your personal information online, billing details and many more. This article helps you to understand the basic functionality of Office My Account. Also, we will discuss the step-by-step process to download, install and manage your version of the Office product.
    office.com/myaccount

    ReplyDelete
  28. Activate Webroot Secureanywhere Antivirus to resolve any problems associated with security of your Desktop, Mobile, Tablet or Laptop just you need to do a single click www.webroot.com/safe For office Setup Visit www.office.com/setup

    ReplyDelete
  29. MS Office suite is most using software in the world and it is available for home users and business users also. MS Office provides all the needed application to do any report, spreadsheet, presentation or email. Some of the MS Office Applications are Microsoft Excel, Microsoft Publisher, Microsoft PowerPoint, Microsoft Visio, Microsoft Word, Microsoft Outlook, Microsoft OneNote, Microsoft Access, Microsoft Project, and OneDrive for Business etc.
    office.com/setup

    http://www.office-com-setup.me

    ReplyDelete
  30. Microsoft Office setup has a wide range of products with different features.These versions include office setup 2016, office setup 365, office setup Home & Student and much more. For All these products you will need a Microsoft office account to access the full features of office setup. If you use services like Outlook, OneDrive, & Skype then you should definitely have a Microsoft account. Recommended links for installing Microsoft office setup are www.office.com/setup , office.com/setup , setup.office.com . Join us today & find the possible, your business needs office 365 & office 2016
    office.com/setup

    www.officecomsetup.xyz

    ReplyDelete
  31. garmin.com/express
    Garmin.com/express - Garmin Express is an application
    which provides the ability to access, control and manage all other
    Garmin devices from one place. Furthermore, using Garmin.com/express
    you can manage your device downloads and updates. In addition, you can
    sync all your fitness data or other information and ensure accurate navigation
    even on streets.

    ReplyDelete
  32. norton.com/setup
    www.norton.com/setup - Let's get Started with Norton Security
    as we are here to get you the easiest way to Setup Norton Security. Feel
    free to contact us if you need any help.

    ReplyDelete
  33. webroot.com/safe
    Webroot.com/safe - Activate Your Webroot Com Safe on your
    laptop, PC, Smartphone etc & secure your devices. Let's Get Started
    with Webroot Safe at www.Webroot.com/safe & Activate Webroot Safe.

    ReplyDelete
  34. Great goods from you, man. I have understand your stuff previous to and you’re just too excellent. I actually like what you’ve acquired here, really like what you are saying and the way in which you say it. You make it enjoyable and you still care for to keep it wise. I cant wait to read far more from you. This is really a tremendous web site.

    ReplyDelete
  35. Microsoft Office offers you to download the various Microsoft Office setup software which may enhance the efficiency of your task and make them faster. Microsoft Office includes a wide range of software such as Microsoft Office 365, 2016, Microsoft Office Home, Microsoft Office Home & Office, Microsoft Office Business etc. www.office.com/setup

    ReplyDelete
  36. Install Office Setup – Sign-in to you microsoft account and then Enter 25 digit alphanumeric office setup product key on country and language.click on next to start office installation.We are the best Office Setup in US, Canada and Australia. At Office Setup, we put high effort, moderate IT answers for organization's, and people.Whether set up or beginning, equipment or programming, system or electronic, we have something for each financial plan. officeplus.net is the exchanging name of Spacesolutions Pvt Ltd situated in California, USA. We are not Microsoft. However we are trained professionals to provide technical support for We are the world's biggest innovation wholesaler and a main innovation deals, showcasing and logistics organization for the IT business around the world. Our people group based ethos, focused costs and nature of administration settles on Office Setup the right decision for your IT needs .Whether you are a learner or experienced in IT our courses are altered to furnish you with the key achievement criteria to thrive in future attempts.
    www.office.com/setup

    ReplyDelete
  37. ATT LOGIN - AT&T is an American Multinational Company that provides a wide range of products and services and have many subsidiaries. And to manage all their services and product, you need an ATT account. Once you use this account and login ATT, you will be able to add your AT&T services and manage them remotely.
    www att com
    http://goattlogin.com/

    COX WEBMAIL - Cox is a private American Company that provides digital cable television, telecommunications, and Home Automation services in the United States. They also provide a very reliable support service to their users. You can register yourself with the Cox mail and get started with their services now.cox webmail
    http://mycoxwebmail.com

    ReplyDelete
  38. Thank you for posting this article, the concept is clear and really useful. I appreciate.
    office.com/setup
    office.com/myaccount

    ReplyDelete
  39. Brother Printer Customer Support never stop thriving for achieving milestones and hence make it a point to deliver the fastest custom solutions to all kinds of issues regarding your printer. Providing a 24x7 services at +1-888-621-0339 is our one of the many promising features that we entertain to ensure resolving the issues as soon as possible.

    brother printer technical support

    ReplyDelete
  40. Why Norton Antivirus is different from Windows Defender?
    http://www.setupnorton.co.uk/blog/2018/10/22/why-norton-antivirus-is-different-from-windows-defender/

    ReplyDelete
  41. Call our Brother Printer Support Number +1-888-621-0339 for tech support for your Brother Laser Printer and other printers. We offer round the clock tech services such as Brother Printer Driver download. Brother Laser Printer

    ReplyDelete
  42. NORTON.COM/SETUP - DOWNLOAD, INSTALL OR SETUP NORTON ACCOUNT

    +44-800-368-7751
    www.setupnorton.co.uk

    ReplyDelete
  43. In case you wish to download and install the tool then you may need to visit the link norton.com/setup. The Norton 360 Antivirus helps you to detect, prevent and block the malicious sites or online threats. Here in this article, we will discuss the process to Unblock Website Norton 360 Antivirus.
    http://nortonnortoncom.com/

    ReplyDelete
  44. MS office Teams unites everything a group needs in a single place. You can coordinate the applications and administrations you require, including Office 365 applications like Excel or countless gathering applications. visit office.com/setup for Download, Installation and Activation Microsoft Office.

    ReplyDelete
  45. when you need to visit office.com/setup to Download, setup and install.Office 2019 will be the next upgraded version of PowerPoint, Excel, Word, Access, Outlook, Visio and Publisher. These new applications have already been introduced in the market on 24th September.

    ReplyDelete
  46. After visiting the norton.com/setup, access your account, manage your subscription, and extend your Norton protection to PC, Mac, Android and iOS. www.Norton.com/setup: Learn, how to download and setup Norton Antivirus software For Windows and Mac OS PC/Laptop.

    ReplyDelete
  47. webroot.com/safe Setup Enter your product key online. Create or log into your Webroot account here. Manage your security across multiple devices, with any Webroot product webroot safe.

    ReplyDelete
  48. office.com/setup– Check out the easy steps for installing, ownloading, activation and re-installing the Microsoft office at www.office.com/setup. MS Office Products like Office 365 Home, Office 2016 Business Premium, Office Professional 2016, Renew your Office, Office 365 Personal etc.

    ReplyDelete
  49. Microsoft Office 365: How to indicate Microsoft Office on Desktop and Laptop Computers Made May 27, 2015 Category Microsoft Office com setup Products Once your Microsoft Officecom setup record has been set up and you have changed into most of your customer limits. office.com/setuphttp://officecomofficesetup.com/

    ReplyDelete
  50. norton.com/setup is one among the fundamental standard antivirus that is enormously searched for guaranteeing contraption and giving a 1 stop security reply to any or every last one of the aggregate system far and wide. The connection offers an awesome bumble of bundle answer that affirmation your work regions, workstations and telephones from the horrendous savage on-line dangers.http://nortoncom-norton.com

    ReplyDelete
  51. Microsoft Office.com/Setup is the full suite of Microsoft limit programming that joins a blend of employments, affiliations, and server like Excel, PowerPoint, Word, OneNote, Publisher and Access. Close by the working frameworks, these endeavors are Microsoft's key things that are everything seen as utilized programming on the planet. Microsoft Office Setup bundles all the best programming that Microsoft passes on to the table. http://officecom-setup.com

    ReplyDelete
  52. avast support number Provide complete support for Avast antivirus installation , uninstallation and updates.We are your tech support provider which is dedicated to provide best in class services for setup and installation of all kinds of software and hardware for computer systems and peripherals.Avast Customer Support Toll Free 1-844-546-5500.http://www.avastcomsupport.com

    ReplyDelete
  53. Microsoft Office.com/Setup is the full suite of Microsoft efficiency programming that joins an assortment of utilizations, administrations, and server like Excel, PowerPoint, Word, OneNote, Publisher and Access. Aside from the working frameworks, these projects are Microsoft's key items that are generally utilized programming on the planet. Microsoft Office.com/setup bundles all the best programming that Microsoft brings to the table. http://officecom-office.com

    ReplyDelete
  54. This comment has been removed by the author.

    ReplyDelete
  55. Norton is one in every of the foremost in style antivirus that is very legendary for shielding device and giving a 1 stop security resolution to all or
    any the folks worldwide. the corporate offers a good vary of software package resolution that defend your desktops, laptops and mobile phones from the
    unwanted harmful on-line threats.
    norton.com/setuphttp://nortoncomnortonsetup.com/

    ReplyDelete
  56. norton setup is simple for any client and gadget. you have to go to office site of norton and enter key to initiate it.norton is easy to use and simple to explore with inbuilt guidance to setup and sweep your gadget for assurance.
     norton.com/setup | www.norton.com/setup

    ReplyDelete
  57. hi, reading your article makes me have a lot of experience, very good http://45.32.85.12/

    ReplyDelete
  58. Your selection of topic is very good and also well written. Thanks for sharing. I feel like all your ideas are incredible! Great job.
    mcafee.com/activate
    norton.com/setup
    mcafee.com/activate

    ReplyDelete
  59. Thank you so much for sharing such a superb information with us.
     office.com/setup |  www.office.com/setup

    ReplyDelete
  60. Norton.com/Setup is best Antivirus available in the market. Download www.norton.com/setup To activate your Norton.com/Setup with product key you can visit www.norton.com/setup

    Office.com/Setup is a product of MS Office.com/Setup. Get www.office.com/Setup support if you face problem to activate www.office.com/Setup or install Microsoft office product. Install Office Setup with Product Key.

    ReplyDelete
  61. www.norton.com/activate | norton setup guide at norton.com/setup norton is one amongst
     norton.com/setup | www.norton.com/setup

    ReplyDelete
  62. office.com/setup – get simple strides for download, introduce office setup
    office.com/setup|www.office.com/setup

    ReplyDelete
  63. mcafee is the best antivirus to shield your gadget from numerous virues.
    mcafee.com/activate|www.mcafee.com/activate

    ReplyDelete
  64. Nice post! This is a very nice blog that I will definitively come back to more times this year! Thanks for informative post www.webroot.com/safe

    ReplyDelete
  65. Office.com/setup – After purchasing Microsoft Office setup, you need to download it from your account. Click on the Install button and then activate the setup by going to www.office.com/setup and entering the activation key.

    www.office.com/setup

    ReplyDelete
  66. Soma Pain Reliever , Smart Pills related to cognitive enhancement, pain,etc. Good quality medications and customer satisfactory results assured. Well-packaged and better shipping facilities available.

    ReplyDelete
  67. I’m impressed with the special and informative contents that you just offer in such short timing. webroot.com/safe

    ReplyDelete
  68. For people having trouble with their fatigue and sleepiness, try Waklert. Waklert is one of the strongest Nootropics in the world. It comes from the Armodafinil family and is known to last for around 15 hours once ingested. Buy Waklert online from Online Pharmacy Pills for better health and increased cognition.

    ReplyDelete
  69. Hi
    I read your post and found it quite interesting.
    The post you shared is very unique and informative.
    Thanks for sharing such a useful post.

    mcafee.com/activate | norton.com/setup | office.com/setup | office.com/setup

    ReplyDelete

  70. Nice post! get step-by-step guide for office – activate, download & complete installation from office.com/setup and we provide antivirus free technical support, customer service & online support to activate antivirus and to install ms office ,get live chat help & support by just visiting mcafee.com/activate & norton.com/setup .

    ReplyDelete
  71. We are providing you step by step procedure for downloading, installing and activating any McAfee antivirus security software by using a 25 character alpha-numeric activation key code.Mcafee.com/Activate

    ReplyDelete
  72. Download the security product, and give you the best protection against online threats that won't interrupt your work by norton.com/setup

    ReplyDelete
  73. Get office setup support if you face problem to activate office.com/setup or install Microsoft office product. Install office.com/setup with Product Key. office.com/setup

    ReplyDelete
  74. I would like to congratulate you for an amazing blog. Personally, I like your blog very much. I am also in the same business, so I would love to share my business Details here. Kindly Visit.


    it brood.com
    Global Online Pills

    ReplyDelete
  75. I would like to congratulate you for an amazing blog. Personally, I like your blog very much. I am also in the same business, so I would love to share my business Details here. Kindly Visit.
    it brood.com
    Global Online Pills

    ReplyDelete
  76. office.com/setup activate the microsoft office

    office.com/setup just download and activate the Microsoft office setup for online support call us

    For more visit website: office.com/setup

    ReplyDelete
  77. Antivirus programming can broaden the life and use of your computer by ensuring the equipment and the operational programming from unsafe viruses. computer problems

    ReplyDelete
  78. Nice post. I was checking continuously this weblog and I am impressed!

    online pharmacy pill

    ReplyDelete
  79. Hi, I read your post and found it quite interesting. The post you shared is very unique and informative. Thanks for sharing such a useful post.

    For more information visit on office.com/setup | Norton.com/setup| office.com/setup

    ReplyDelete
  80. Get Step-by-Step guide for Antivirus – Activate, Download & complete installation from norton.com/setup and get the best security setup for any of your preferred devices just by visiting norton.com/setup & mcafee.com/activate . Also try our step by step guide for office.com/setup .

    ReplyDelete