Can't delete TROJ_FAKEAV.BLV

[Felix46]

Sponsored Links

Hi friends, I using HCL laptop and the company has installed a windows vista on it. Last night I was surfing an internet for downloading a certain software to download. And I get that software what I want but that software has given me something free which is commonly know as Trojan. Then my system is infected by TROJ_FAKEAV.BLV trojan. Can any one tell me how to remove this trojan form system.

[Milton.J]

TROJ_FAKEAV.BLV Trojan will infect your system through the social engineering methods to get infect the users into performing specific actions which may, directly or indirectly, and it does malicious routines to be performed. Specifically, it comes into your system through as an attachment of a spammed email message. And your system get infected with this TROJ_FAKEAV.BLV trojan

[Steve123]

TROJ_FAKEAV.BLV shows a fake balloon message in the system tray:
"Your computer is infected"
Windows has detected a spyware detection

It also shows fake scanning process.

After the scan your system, this FAKEAV will ask you to purchase the full version of the application to deletes all threats. If the are going to agrees, then you will be redirected to http://{BLOCKED}o-21.com and from where the application can be purchased.

Then is asks you for your credit card information so where it may be lead to information theft.

[Big Fish]

TROJ_FAKEAV.BLV Trojan comes with the given below sample of email message:

Subject: Conficker.B Infection Alert Spam
Body:
Dear Microsoft Customer,

Starting 18/10/2009 the ‘Conficker’ worm began infecting Microsoft customers unusually rapidly. Microsoft has been advised by your Internet provider that your network is infected.
To counteract further spread we advise removing the infection using an antispyware program. We are supplying all effected Windows Users with a free system scan in order to clean any files infected by the virus.

Please install attached file to start the scan. The process takes under a minute and will prevent your files from being compromised. We appreciate your prompt cooperation.

Regards,
Microsoft Windows Agent #2 (Hollis)
Microsoft Windows Computer Safety Division

Attachment: install.zip

[Zachary]

TROJ_FAKEAV.BLV Trojan generates the given below folders:
%Program Files%\AntivirusPro_2010
%Program Files%\AntivirusPro_2010\data
%Start Menu%\Programs\AntivirusPro_2010

It also creates the given below copy of itself:
%Application Data%\seres.exe
%Application Data%\svcst.exe
%Start Menu%\Programs\AntivirusPro_2010\AntivirusPro_2010.exe

[Shen]

TROJ_FAKEAV.BLV trojan creates the given below file and component:

%Application Data%\doweqomob.pif
%Application Data%\ereqiw.lib
%Application Data%\ewina.pif
%Application Data%\fenum.vbs
%Application Data%\gopocis.sys%Application Data%\lipelogyc.reg
%Application Data%\lizkavd.exe
%Desktop%\AntivirusPro_2010.lnk
%Program Files%\AntivirusPro_2010\AntivirusPro_2010.cfg
%Program Files%\AntivirusPro_2010\AntivirusPro_2010.exe
%Program Files%\AntivirusPro_2010\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
%Program Files%\AntivirusPro_2010\Microsoft.VC80.CRT\msvcm80.dll
%Program Files%\AntivirusPro_2010\Microsoft.VC80.CRT\msvcp80.dll
%Program Files%\AntivirusPro_2010\Microsoft.VC80.CRT\msvcr80.dll
%Program Files%\Common Files\sepoxexij.scr
%Start Menu%\Programs\AntivirusPro_2010\AntivirusPro_2010.lnk
%Start Menu%\Programs\AntivirusPro_2010\Uninstall.lnk
%system%\_scui.cpl
%systemroot%\Documents and Settings\All Users\Documents\yzuwan.bin
%Windows%\yfife.dl