ContraVirus

ContraVirus

ContraVirus

Rogue security software

ContraVirus is a rogue spyware application that poses as a legitimate anti-spyware program.[1] The application uses a false scanner to force computer users to pay for the removal of non-existent spyware items. It may also be known as ExpertAntivirus.[2][3]

Not to be confused with Coronavirus.

Methods of infection

ContraVirus may be downloaded as a trojan horse, along with possible other software. Typically, it may be installed by the SmitFraud trojan.[4]

Symptoms of infection

ContraVirus has been known to display fake messages stating that a user's computer is infected with spyware. It may also install the file wincom27.dll, located in C:\WINDOWS\ and ext32inc.dll located in C:\WINDOWS\system\, in order to persuade a user to purchase the software.[5] Traditionally, a user will see Contravirus running a "scan" of their computer, at which time a user will be prompted to purchase the Contravirus software in order to remove the threat. It may also hijack the user's browser and install a toolbar.[6]

95, 98, Me, NT, XP, Server 2000, 2000, Server 2003, Vista, Server 2008, 7 and Server 2008 R2 are operating systems capable of becoming infected.

See also

References

  1. [1]
    "W32/Contra.worm". Archived from the original on 2009-09-01. Retrieved 2008-08-20.
  2. [2]
    "Risk Detected". Archived from the original on June 7, 2011.
  3. [3]
    http://www.ca.com/securityadvisor/pest/pest.aspx?id=453113271 [dead link]
  4. [4]
    "What is a Trojan Horse? Definition from WhatIs.com". Security. Retrieved 2023-12-11.
  5. [5]
    "How to Remove Contravirus (Removal Instructions) - Spyware and Malware Removal Guides Archive".
  6. [6]
    Vincentas (12 October 2012). "ContraVirus in SpyWareLoop.com". Spyware Loop. Retrieved 28 July 2013.
Share this article:

This article uses material from the Wikipedia article ContraVirus, and is written by contributors. Text is available under a CC BY-SA 4.0 International License; additional terms may apply. Images, videos and audio are available under their respective licenses.