AntiMalwarePro

4 July 2009 0 Comment

AntiMalwarePro is a fake computer security application that misleads user of its real intention. This program is designed to look and pretend like legitimate antivirus program. Authors of AntiMalwarePro aim to sell the application in a fraudulent manner. It uses unfair marketing technique that will produce false alert regarding presence of threats and suggest fixing them by procuring the licensed version of AntiMalwarePro.

The creation of AntiMalwarePro incorporates a Trojan that may help the propagation to target computers connected through the Internet. Eversince, Trojan is very aggressive in finding security loopholes and misuse it to gain an access on the computer. Once inside, Trojan utilizes the Internet connection and fetches a copy of AntiMalwarePro from its main server. Trojans are also capable of installing the rogue software without catching user’s attention.

Once completely loaded, AntiMalwarePro announces its presence with a barrage of security alerts. These tricky pop-up warnings are imaginary. None of the detected threats lives inside the PC. The only malware present that needs immediate attention and removal is no other than AntiMalwarePro itself.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista

Malware Behavior
AntiMalwarePro may cause several anomalies once installed on the computer. It changes Internet browser settings and redirect home page to unwanted address. Displaying excessive commercial advertisements also makes this potentially unwanted application so annoying once loaded.

Added Registry Entries:

HKEY_CURRENT_USER\Software\AntiMalware_Pro
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiMalware Pro_is1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AntiMalware_ProNET"

%ProgramFiles%\AntiMalware Pro\AntiMalwarePro.exe %ProgramFiles%\AntiMalware Pro\Cl.exe %ProgramFiles%\AntiMalware Pro\definitions\200812.cab %ProgramFiles%\AntiMalware Pro\E_PMA.dll %ProgramFiles%\AntiMalware Pro\FolderPaths.txt %ProgramFiles%\AntiMalware Pro\ScheduleAP.txt %ProgramFiles%\AntiMalware Pro\Task.dat %ProgramFiles%\AntiMalware Pro\unins000.dat %ProgramFiles%\AntiMalware Pro\unins000.exe %windir%\system32\VolumeMSPrLam.dll

How to Remove AntiMalwarePro

In order to completely remove the threat, it is best to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.