WolfRam Antivirus

11 August 2011 Rogue 0 Comment

Wolfram Antivirus is a phony anti-malware product that surely will pollute the security system. As expected, this kind of program has sole purpose of misleading victims and aims to sell the unwanted application. Fake alerts holds as vendor of Wolfram Antivirus by mass-producing fake security notices. With the development of new malicious software (MalWare) daily, authors figure out diversionary tactics to slip inside victim’s computer. Not only they make it sound and look like legitimate anti-virus but imitate the design of some admired security product. In general, Wolfram Antivirus relies on deceptive scheme to broaden it fraudulent activity.

Having Wolfram Antivirus on the computer can be easily recognized. First, extreme occurrences of false pop-up alert and warning messages approach user’s attention in an effort to challenge their confidence with existing anti-virus program. Wolfram Antivirus will disable AV software and when executed will declare it as infected. Aside from that, desktop is locked and stays that way until the paid version of the unwanted application is obtained. This fraudulent action assures Wolfram Antivirus top place on the lists of rogue security product at present time.

As an advice, rogue application must be prevented from penetrating the computer. Genuine anti-malware software must guard the PC at all times. As a rule, keep away from unknown web sites and refrain from downloading executable files available on unsecured file-sharing network.

Screen Shot Image:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Wolfram Antivirus Removal Procedures

Wolfram Antivirus REMOVAL TOOL:
Our first recommendation is to use removal tool in eliminating WolfRam Antivirus. This malware will dropped files with random names so manually removing each is a pain staking process. Worst, accidental deletion of files being used by the system may cause permanent damage to computer operation. Download and run MBAM to get rid of the rogue application.

MANUAL REMOVAL PROCEDURE:
1. Press Ctrl+Alt+Del on keyboard to stop process associated to “Wolfram Antivirus”. When Windows Task Manager opens, go to Processes Tab and find and end the following process:
Wolfram AntiVirus.exe,
(random characters).exe

2. You need to update your installed antivirus application to have the latest database.
3. Thoroughly scan the system and any detected threats must be removed. If removal is prohibited, it is best to quarantine the infected item. Manually locating and deleting of malicious files should also be performed. Please see files below that are related to Wolfram Antivirus Virus.
4. Registry entries created by Wolfram Antivirus must also be remove from the Windows system. Please refer below for entries associated to the rogue program. [how to edit registry]
5. Exit registry editor.
6. Get rid of Wolfram Antivirus start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. A windows containing System Configuration Utility will be launched. Go to Startup tab and uncheck the following Start-up item(s):
(Wolfram AntiVirus.exe,
(random characters).exe

7. Click Apply and restart Windows.

Technical Details and Additional Information:

Malicious Files Added by Wolfram Antivirus
%Tempr%\[random characters]\Wolfram AntiVirus
%Tempr%\[random characters]\Wolfram AntiVirus.exe
%Desktop%\Wolfram AntiVirus.lnk

File Location for Windows Versions:

• %Temp% refers to directory  C:\Windows\Temp.

Wolfram Antivirus Registry Entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run “[random]”
HKCU\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”