Rogue software details: Antivirus Suite

Antivirus Suite is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\ApplicationData\lvwkbwfbr\tnrakjptssd.exe

Folders
c:\ProgramFiles\Your Protection
c:\StartMenu\Programs\Your Protection

Registry entries
Key: HKEY_CURRENT_USER\Software\avsoft
Key: HKEY_CURRENT_USER\Software\avsuite
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run
Value: uvrrcfkp
Data: C:\Documents and Settings\VPCTest\Local Settings\
Application Data\lvwkbwfbr\tnrakjptssd.exe

Source: Lavasoft Malware Lab’s Rogue Gallery.

Share this