Virus Total 2010

7 August 2010 Rogue 0 Comment

Virus Total 2010 is another masterpiece of fake antivirus program that endangers Internet users worldwide. Virus Total 2010 was discovered as another one to be in the same path as Security Master AV. With a Trojan coming from sources like infected web sites, fake online virus scanner, fraud email messages and file-sharing networks, expect that this rogue program will be infecting millions of users in less than a month. Users can easily avoid being infected by Virus Total 2010 virus, just simply never execute unwanted links neither visit unknown web sites. An updated antivirus application may also protect the system from this attack.

If in case, you saw some signs of infections and wanted to be sure of the situation, remember some of the familiar symptoms carried by this rogue programs. Internet redirect is one and  probably the popular as observed by expert. It is intended to redirect a browser to malicious web page where a Virus Total 2010 program is waiting to be  fetched by visitor. Separate Trojan infection will disable anti-virus application to avoid interference with malware’s illegal activities once inside the system.

When Virus Total 2010 is detected on your PC, immediately download and run a security program. Running a scan of anti-virus and anti-malware product separately is the best solution to remove Virus Total 2010 infections.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista

Malware Behavior
When executed and installed, Virus Total 2010 will place a number of both malicious and clean files on various location on the infected system. It also alters registry so that it is included in Windows start-up items. Once loaded, this malware will use aggressive method to push victims into paying for the registered version.

Even though Virus Total 2010 is a computer infection, it will not spread through local network. The only means of propagation is through the Internet. Malicious web sites, instant messaging applications and unsecured file-sharing networks are just a few sources of Virus Total 2010.

Added Registry Entries:

HKCU\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1?
HKCU\Software\Microsoft\Windows\CurrentVersion\Run “Virus Total 2010”
HKCU\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala . com/?&uid=7&q={searchTerms}”
HKCU\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
HKCR\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKCR\SM345d.DocHostUIHandler
HKCU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala . com/?&uid=7&q={searchTerms}”
HKCR\Software\Microsoft\Internet Explorer\SearchScopes “URL” = http://findgala . com/?&uid=7&q={searchTerms}

Associated Files and Folders:

c:\Documents and Settings\All Users\Application Data\[random]\VT789r.exe
c:\Documents and Settings\All Users\Application Data\[random]\VT.ico
c:\Documents and Settings\All Users\Application Data\[random]\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\[random]\Quarantine Items\
c:\Documents and Settings\All Users\Application Data\[random]\VT2010\
c:\Documents and Settings\All Users\Application Data\[random]\VT2010\bn87625.bd
c:\Documents and Settings\All Users\Application Data\SMNPCTCAV\IOLPHTHGBRDS.cfg
%UserProfile%\Application Data\Virus Total 2010\cookies.sqlite
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\DBOLE.exe
%UserProfile%\Recent\DBOLE.tmp
%UserProfile%\Recent\ddv.sys
%UserProfile%\Recent\energy.tmp
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\FS.sys
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\runddl.dll
%UserProfile%\Recent\runddl.sys
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\sld.exe
%UserProfile%\Recent\sld.sys
%UserProfile%\Recent\tempdoc.tmp

Using Removal Tool

In order to completely remove the threat, it is best to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected computer.

Online Virus Scanner

Another way to remove Virus Total 2010 from a computer without the need to install additional anti-virus application is to perform a thorough scan with free Online Virus Scanner that can be found on websites of legitimate computer security provider.