Encyclopedia entry
Updated:
Apr 17, 2011
| Published:
Feb 03, 2010
Aliases
Adware.Malwarewipe.63
(Dr.Web)
-
Win32/Adware.MalwareWipe
(ESET)
-
SpyCrush
(McAfee)
-
W32/FakeAV.W!genr
(Norman)
-
Application/MalwareBurn
(Panda)
-
MalwareBurn
(other)
-
Malware Wipe
(other)
Alert Level
(?)
High
Antimalware protection details
Microsoft recommends that you download the
latest definitions
to get protected.
Detection last updated:
Definition: 1.101.892.0 Released: Apr 05, 2011
|
|
Detection initially created:
Definition: 1.45.287.0 Released: Oct 07, 2008
|
Summary
Program:Win32/MalwareBurn is a program that may be promoted as a security scanner. When run, it may display exaggerated or false claims of threat detection.
Symptoms
System Changes
The following system changes may indicate the presence of Program:Win32/MalwareBurn:
Technical Information (Analysis)
Program:Win32/MalwareBurn is a program that may be promoted as a security scanner. When run, it may display exaggerated or false claims of threat detection.
Installation
When installed, Program:Win32/MalwareBurn creates the following folders:
- %ProgramFiles%\Malwareburn 7.3
- %ProgramFiles%\Malwareburn 7.3\quarantine
- %ProgramFiles%\Malwareburn 7.3\lang
- %UserProfile%\Start Menu\Programs\Malwareburn 7.3
Within these folders it creates the following files:
- %ProgramFiles%\Malwareburn 7.3\Malwareburn 7.3.exe
- %ProgramFiles%\Malwareburn 7.3\msvcr71.dll
- %ProgramFiles%\Malwareburn 7.3\msvcp71.dll
- %ProgramFiles%\Malwareburn 7.3\mwdb.dat
- %ProgramFiles%\Malwareburn 7.3\lang\english.ini
- %ProgramFiles%\Malwareburn 7.3\uninst.exe
- %ProgramFiles%\Malwareburn 7.3\Malwareburn.ini
It also creates the following shortcuts that link back to its main executable "Malwareburn 7.3.exe":
- %ProgramFiles%\Malwareburn 7.3\Malwareburn 7.3.url
- %UserProfile%\application data\microsoft\internet explorer\quick launch\Malwareburn 7.3.lnk
- %UserProfile%\Desktop\Malwareburn 7.3.lnk
- %UserProfile%\Start Menu\Malwareburn 7.3.lnk
- %UserProfile%\Start Menu\Programs\Malwareburn 7.3\Malwareburn 7.3.lnk
- %UserProfile%\Start Menu\Programs\Malwareburn 7.3\Malwareburn 7.3 website.lnk
- %UserProfile%\Start Menu\Programs\Malwareburn 7.3\uninstall Malwareburn 7.3.lnk
Execution
Program:Win32/MalwareBurn has the following shortcut:
It may be present in the system taskbar with the following icon:
When run, the following image may display:
It has the following user interface:
Analysis by Patrick Nolan
Prevention
Recovery