Home / malware

PDF

Rogue:W32/DrAntiSpy

First posted on 06 March 2009.
Source: SecurityHome

Aliases :

There are no other names known for Rogue:W32/DrAntiSpy.

Explanation :

Dishonest antivirus software which tricks users into buying or installing it, usually by infecting a user's computer, or by pretending the computer is infected.

right]This family is the detection for the DrAntiSpy rogue antispyware programs. As with most rogueware, DrAntiSpy will display fake or exaggerated scanning results to scare the user into buying a license to use the program.

Installation

During installation, the DrAntiSpy family displays a generic end user license agreement (EULA), as seen in this representative example:



If user accepts the EULA by clicking on the appropriate button, the installer downloads and installs the rogueware on the system.

The files are installed at:

• C:Program FilesDrAntispy

Last update 06 March 2009

 

TOP