请输入您要查询的百科知识:

 

词条 VirusHeat
释义

  1. Infection

  2. Symptoms

  3. Known variants

  4. Removal

  5. See also

  6. References

  7. External links

{{Orphan|date=December 2010}}{{Infobox computer virus
| Fullname = VirusHeat
| Common name = VirusHeat
| Family = SmitFraud
| Technical name = VirusHeat
| Aliases = Virus Heat, VirusHeat 3.9, VirusHeat 4.3, VirusHeat 4.4
| Classification = Rogue security software
| Type = Microsoft Windows
| Origin = Russian Federation
}}

VirusHeat is malware that disguises itself as a legitimate anti-virus program. It is part of the Smitfraud family. VirusHeat tricks users into buying the full version of the program through repeated false alerts and popups, purporting to alert the user that there is a system error or they are infected, and must buy the full version to remove. It was launched on February 8, 2008.

Infection

VirusHeat is usually downloaded through a trojan, usually the Zlob trojan, that is bundled in fake Video codecs. It may also be downloaded from the malware's website. Once installed, VirusHeat will run a scan and report exaggerated results that the user's computer is infected. When the scan is complete, a warning message will pop up linking to VirusHeat's homepage where the user is prompted to buy the software.

Symptoms

VirusHeat displays false warning messages (e.g. intimating that you had downloaded e.g. an XXX video) followed by a realistic Virus removal pop up which launches to their web-site whether you select "Yes" or "No" button: Then uses exaggerated scan reports to mislead the user. VirusHeat repeatedly annoys the user with pop up warnings that prompt the user to purchase a full version of the program. VirusHeat may attempt to change the user's IE homepage to go to VirusHeat's homepage. VirusHeat may automatically launch on startup.

VirusHeat installs the following:

Processes
  • VirusHeat 3.9
  • VirusHeat 3.9.exe
DLLs
  • eeioq.dll
  • iinqyl.dll
  • wuuawkz.dll
Directories
  • C:\\Program Files\\VirusHeat
Registry Keys
  • HKEY_CLASSES_ROOT\\clsid\\{5b55c4e3-c179-ba0b-b4fd-f2db862d6202}

Known variants

VirusHeat behaves similar to other known rogue security software. SpywareQuake, VirusBurst, AntiVirGear, VirusProtect, VirusProtectPro are variants of VirusHeat.

Removal

{{Expand section|date=March 2008}}

Various anti-spyware removal tools are known to remove VirusHeat. The latest definition file must be utilized in most anti-spyware programs to completely remove VirusHeat and any associated files.

See also

  • Malware
  • Spyware
  • Adware
  • Rogue Security Software
  • Wikipedia's Spyware removal category

References

  • Symantec.com - VirusHeat is a misleading application that may give exaggerated reports of threats on the computer
  • research.sunbelt-software.com - VirusHeat is a rogue security program known for scaremongering, high-pressure advertising practices
  • virusheat.com Web Safety Ratings from McAfee SiteAdvisor
{{No footnotes|date=September 2018}}

External links

  • Bleepingcomputer.com VirusHeat Removal Instructions
  • VirusHeat SecurityLab
  • Removal Guide for VirusHeat
  • Remove VirusHeat. Malware Removal Instructions.
  • Good Advice and Resource on VirusHeat
{{DEFAULTSORT:Virusheat}}

1 : Rogue software

随便看

 

开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。

 

Copyright © 2023 OENC.NET All Rights Reserved
京ICP备2021023879号 更新时间:2024/11/11 11:51:01