Fake AV - Windows Ultimate Safeguard

 

MD5 : 53348c0dbcd99f235b05b45c918a019d 

Size: 2955264 Bytes

Virustotal scan 

Unlock code : 0W000-000B0-00T00-E0020  

Values Created :

CU - Current User

LM - Local Machine

CU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector"C:\Documents and Settings\User

\Application Data\Protector-hwkp.exe"

CU\Software\Microsoft\Windows\CurrentVersion\Settings\net\"2009-1-9_5"

CU\Software\Microsoft\Windows\CurrentVersion\Settings\UID\"uihmcmswxe"

Directories Created :

C:\Documents and Settings\User\Application Data\Macromedia

C:\Documents and Settings\User\Application Data\Macromedia\Flash Player

C:\Documents and Settings\User\Application Data\Macromedia\Flash Player\macromedia.com

C:\Documents and Settings\User\Application Data\Macromedia\Flash Player\macromedia.com\support

C:\Documents and Settings\User\Application Data\Macromedia\Flash Player\macromedia.com

\support\flashplayer

C:\Documents and Settings\User\Application Data\Macromedia\Flash Player\macromedia.com

\support\flashplayer\sys

 Files Created:

C:\Documents and Settings\User\Application Data\Macromedia\Flash Player\macromedia.com

\support\flashplayer

\sys\#local\settings.sol

C:\Documents and Settings\User\Application Data\Protector-hwkp.exe

C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\8DIFWPAR

\galaint.inforeleasestat[1].htm

#Comodo Camas Analysis    

DOWNLOAD SAMPLE:

 Download

 Password: malwaresniper

Members www.malware-sniper.blogspot.com no responsibility for any damage caused by malware. It is used at your own risk!