WinAntiVirus RAS - PrivacyAnywhere Spyware Research Library


	Home / Research


	WinAntiVirus

Details of the WinAntiVirus are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware.


Name:	WinAntiVirus
Type:	RAS
Risk:
Description:	WinAntiVirus is a rogue anti-virus program from WinSoftware which has been known to be downloaded by some trojans. It claims to remove virus infections but instead shows detections of legitimate keys and files to urge users to buy its application. Removal of this software is advisable if it is not installed for a purpose.

Removal
We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately.

Registry Items:

HKEY_CURRENT_USER\Software\WinAntiVirus Pro 2006
HKEY_CLASSES_ROOT\shellex\ContextMenuHandlers\ShellExtension\\{1AC5C88A-DEA7-462b-A232-04AF5CA42E7E}
HKEY_CLASSES_ROOT\Alerter.AlerterManip
HKEY_CLASSES_ROOT\Alerter.AlerterManip.1
HKEY_CLASSES_ROOT\Alerter.PasswordCheck
HKEY_CLASSES_ROOT\Alerter.PasswordCheck.1
HKEY_CLASSES_ROOT\AntiVirus.AntiVirus
HKEY_CLASSES_ROOT\AntiVirus.AntiVirus.1
HKEY_CLASSES_ROOT\AntiVirusCOM.AntiVirusTray
HKEY_CLASSES_ROOT\AntiVirusCOM.AntiVirusTray.1
HKEY_CLASSES_ROOT\AntiVirusCOM.AVOfficeProtect
HKEY_CLASSES_ROOT\AntiVirusCOM.AVOfficeProtect.1
HKEY_CLASSES_ROOT\AntiVirusTrayCOM.AntiVirusTray
HKEY_CLASSES_ROOT\AntiVirusTrayCOM.AntiVirusTray.1
HKEY_CLASSES_ROOT\AppID\{29209238-7159-41ee-9057-4380F3CD7555}
HKEY_CLASSES_ROOT\AppID\{33CAD366-7B60-4c82-BDD5-73B4F5B69045}
HKEY_CLASSES_ROOT\AppID\{367A86A5-D048-4785-86BE-4E2706AAFDD9}
HKEY_CLASSES_ROOT\AppID\{406B7088-1E9D-48C4-B7B2-4FF9738997AB}
HKEY_CLASSES_ROOT\AppID\{5058916D-A3CA-4498-9F76-84221860C05E}
HKEY_CLASSES_ROOT\AppID\{59C9C173-2924-4d54-8E79-A9EB72B2F2DC}
HKEY_CLASSES_ROOT\AppID\{62B74DC2-2C6F-4DAE-9E39-FFFB8018C47B}
HKEY_CLASSES_ROOT\AppID\{7AC7304C-D3E4-4630-9B2C-92238CDCDD12}
HKEY_CLASSES_ROOT\AppID\{989ADB33-3EE9-4A36-8113-76D1B79B606B}
HKEY_CLASSES_ROOT\AppID\{EB2A5B78-7437-43ef-AB74-4AB1D3A374B6}
HKEY_CLASSES_ROOT\AppID\{F09A9349-167D-48bb-9121-43E884DA4689}
HKEY_CLASSES_ROOT\AppID\AntiVirus.DLL
HKEY_CLASSES_ROOT\AppID\AVKernel.EXE
HKEY_CLASSES_ROOT\AppID\c_shield.DLL
HKEY_CLASSES_ROOT\AppID\cs_srv.EXE
HKEY_CLASSES_ROOT\AppID\Quarantine.EXE
HKEY_CLASSES_ROOT\AppID\PopupGuardEngineEXE.EXE
HKEY_CLASSES_ROOT\AppID\VapFM.EXE
HKEY_CLASSES_ROOT\AppID\WinPGI.DLL
HKEY_CLASSES_ROOT\AppID\wizard.DLL
HKEY_CLASSES_ROOT\AVExplorer.ShellExtension
HKEY_CLASSES_ROOT\AVExplorer.ShellExtension.2
HKEY_CLASSES_ROOT\c_shield.DriverManipulate
HKEY_CLASSES_ROOT\c_shield.DriverManipulate.1
HKEY_CLASSES_ROOT\cs_srv.CSManip
HKEY_CLASSES_ROOT\cs_srv.CSManip.1
HKEY_CLASSES_ROOT\IEFWBHO.IEFW
HKEY_CLASSES_ROOT\IEFWBHO.IEFW.2
HKEY_CLASSES_ROOT\Interface\{018CE604-ECDE-442A-BD82-4FF09AF591B0}
HKEY_CLASSES_ROOT\Interface\{025C9956-0606-4583-BC40-633904FF6D77}
HKEY_CLASSES_ROOT\Interface\{04E6BD0A-05B3-4B79-BECF-F5320FFA859F}
HKEY_CLASSES_ROOT\Interface\{04FC66A0-BDC7-43A3-BDC0-2C35B9020D4E}
HKEY_CLASSES_ROOT\Interface\{06C25756-2623-43B7-A7DA-FE88629A8546}
HKEY_CLASSES_ROOT\Interface\{07174487-A1E8-471B-846D-CDF7455752CA}
HKEY_CLASSES_ROOT\Interface\{0B9A27EB-125F-4F3E-A35C-2769C47A1442}
HKEY_CLASSES_ROOT\Interface\{10559297-851D-4FA9-9ACF-32CFF22ECD16}
HKEY_CLASSES_ROOT\Interface\{186B0F21-C620-4F60-992B-D204B379E941}
HKEY_CLASSES_ROOT\Interface\{1BD800A1-1C40-47E6-99A1-22B04DAB2CE0}
HKEY_CLASSES_ROOT\Interface\{1C9E1FD1-4AF7-4A7C-91EB-691024411210}
HKEY_CLASSES_ROOT\Interface\{2A44B789-9CA4-4D6B-B90A-70407750EA8D}
HKEY_CLASSES_ROOT\Interface\{3994C632-638A-4D16-9EA3-E7159A9C6089}
HKEY_CLASSES_ROOT\Interface\{3AC2E7AC-1E90-4DE8-BD4F-B58275133F82}
HKEY_CLASSES_ROOT\Interface\{3E9C63E2-8EBA-44E7-B7B9-F2D689FE5883}
HKEY_CLASSES_ROOT\Interface\{3EC8F69A-F556-4B1B-906C-A922321182D4}
HKEY_CLASSES_ROOT\Interface\{425DF4F4-0BCA-4876-9318-7617BEF56384}
HKEY_CLASSES_ROOT\Interface\{4CCA8FD9-6E30-44B3-8B44-679E58451DCA}
HKEY_CLASSES_ROOT\Interface\{5D65F8B9-6C63-4227-AB90-04E8D2B87C31}
HKEY_CLASSES_ROOT\Interface\{5D65F8B9-6C63-4227-AB90-04E8D2B87C32}
HKEY_CLASSES_ROOT\Interface\{66BA5DC6-BBA9-470F-A68D-37CCD9AB6788}
HKEY_CLASSES_ROOT\Interface\{712D5A19-B4AD-46F5-92C0-61F34E074D58}
HKEY_CLASSES_ROOT\Interface\{72950EDF-6F3E-4BE9-BA2B-17D6A41BF162}
HKEY_CLASSES_ROOT\Interface\{7FBAF17A-D744-49D2-8CE8-6CECE83FFC95}
HKEY_CLASSES_ROOT\Interface\{81956EF0-BA08-4E39-8D2F-E4081D7E1E0B}
HKEY_CLASSES_ROOT\Interface\{82B9A1FB-6B6B-47D2-8CED-B9A494F26F48}
HKEY_CLASSES_ROOT\Interface\{83FCF557-54C8-400E-A6E5-1354DC02B1D3}
HKEY_CLASSES_ROOT\Interface\{895294F5-45E1-4601-8F90-C564FD765118}
HKEY_CLASSES_ROOT\Interface\{8F528D55-9BDD-4DAA-A6C0-49B445FE3E9D}
HKEY_CLASSES_ROOT\Interface\{8E2D8491-0BF6-40C6-8EEA-0CC9449642AC}
HKEY_CLASSES_ROOT\Interface\{95E5E3BA-3707-472E-A2AC-8AB7450D5C92}
HKEY_CLASSES_ROOT\Interface\{9AA46089-7A3E-4891-8290-0379A019EA43}
HKEY_CLASSES_ROOT\Interface\{A4E786DC-343C-45F7-9C86-9B2653E0DD48}
HKEY_CLASSES_ROOT\Interface\{C0D7029D-0635-4F80-AEE8-E494A6AA3BF0}
HKEY_CLASSES_ROOT\Interface\{C5D388F3-CDC2-48FE-B246-A8321E1DC5B1}
HKEY_CLASSES_ROOT\Interface\{C801474E-936D-473F-92C2-1F798AEE8BBE}
HKEY_CLASSES_ROOT\Interface\{CB1F32C0-E549-4F03-97A1-7F23188FF8B1}
HKEY_CLASSES_ROOT\Interface\{CBA9E0BF-F066-4BCC-B325-CDBAA4C115D3}
HKEY_CLASSES_ROOT\Interface\{D9B2A774-7BBF-4E19-ABC4-7801510BE44F}
HKEY_CLASSES_ROOT\Interface\{DF608652-3F9D-4268-A92B-DC5ACF49BC92}
HKEY_CLASSES_ROOT\Interface\{E18B69D0-7E9E-4C6E-BDD8-879A1FFF7123}
HKEY_CLASSES_ROOT\Interface\{E996A50E-F103-482C-97D6-711E5FA846C4}
HKEY_CLASSES_ROOT\Interface\{EB94E5EA-9220-456C-BD05-DCE40B0B5D2E}
HKEY_CLASSES_ROOT\Interface\{EEB1365B-FA47-46DF-BFD5-DA9DB7E45680}
HKEY_CLASSES_ROOT\Interface\{F4D17C39-69BB-40B5-8250-C86784C42AA6}
HKEY_CLASSES_ROOT\PGAV.PGAV
HKEY_CLASSES_ROOT\PGAV.PGAV.1
HKEY_CLASSES_ROOT\TypeLib\{1234890A-5E6E-4867-8136-CA6F1456B235}
HKEY_CLASSES_ROOT\TypeLib\{29209238-7159-41EE-9057-4380F3CD7555}
HKEY_CLASSES_ROOT\TypeLib\{2BC32EF8-BB73-4099-BB2E-0F2951B3E276}
HKEY_CLASSES_ROOT\TypeLib\{33CAD366-7B60-4C82-BDD5-73B4F5B69045}
HKEY_CLASSES_ROOT\TypeLib\{367A86A5-D048-4785-86BE-4E2706AAFDD9}
HKEY_CLASSES_ROOT\TypeLib\{406B7088-1E9D-48C4-B7B2-4FF9738997AB}
HKEY_CLASSES_ROOT\TypeLib\{5058916D-A3CA-4498-9F76-84221860C05E}
HKEY_CLASSES_ROOT\TypeLib\{59C9C173-2924-4D54-8E79-A9EB72B2F2DC}
HKEY_CLASSES_ROOT\TypeLib\{62B74DC2-2C6F-4DAE-9E39-FFFB8018C47B}
HKEY_CLASSES_ROOT\TypeLib\{732B6533-7F78-4C47-9C01-2979BA0829B9}
HKEY_CLASSES_ROOT\TypeLib\{7AC7304C-D3E4-4630-9B2C-92238CDCDD12}
HKEY_CLASSES_ROOT\TypeLib\{989ADB33-3EE9-4A36-8113-76D1B79B606B}
HKEY_CLASSES_ROOT\TypeLib\{B32FE740-8B67-409A-BCA8-3297263C354E}
HKEY_CLASSES_ROOT\TypeLib\{E2646BAA-C6BC-4FF1-89F4-1B6806D55F6E}
HKEY_CLASSES_ROOT\TypeLib\{EB2A5B78-7437-43EF-AB74-4AB1D3A374B6}
HKEY_CLASSES_ROOT\TypeLib\{F09A9349-167D-48BB-9121-43E884DA4689}
HKEY_CLASSES_ROOT\TypeLib\{F1EB0706-4906-4282-AE0A-913EFD97EA65}
HKEY_CLASSES_ROOT\WAPPChk.WAPPChk
HKEY_CLASSES_ROOT\WAPPChk.WAPPChk.1
HKEY_CLASSES_ROOT\WAP6.PCheck
HKEY_CLASSES_ROOT\WAP6.PCheck.1
HKEY_CLASSES_ROOT\PGAVEngine.PGAVEngine
HKEY_CLASSES_ROOT\PGAVEngine.PGAVEngine.1
HKEY_CLASSES_ROOT\WinPGIntegrator.IEIntegrator
HKEY_CLASSES_ROOT\WinPGIntegrator.IEIntegrator.1
HKEY_CLASSES_ROOT\wizard.RuleWizard
HKEY_CLASSES_ROOT\wizard.RuleWizard.1
HKEY_CURRENT_USER\Control Panel\MMCPL\AVcpl\WinAntiVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cpls\AVcpl\WinAntiVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WAVAutoPlay\DefaultIcon\WinAntiVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WAVAutoPlay\Provider\WinAntiVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinAntiVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinAntiVirusPro2006
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\fat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\WinAntiVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WA5P_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WA6P_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinAntiVirus Pro 2006 Bonus Pack_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TWA5_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TWA5P_is1
HKEY_LOCAL_MACHINE\SOFTWARE\WinAntiVirus Pro 2006
HKEY_LOCAL_MACHINE\SYSTEM\CControl\SafeBoot\Minimal\AVKernel
HKEY_LOCAL_MACHINE\SYSTEM\CControl\SafeBoot\Network\AVKernel
HKEY_LOCAL_MACHINE\SYSTEM\CControl\Session Manager\BootStera\stera.job
HKEY_LOCAL_MACHINE\SYSTEM\CServices\AVKernel
HKEY_LOCAL_MACHINE\SYSTEM\CServices\FWSvc
HKEY_LOCAL_MACHINE\SYSTEM\CServices\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\Program Files\WinAntiVirus
HKEY_LOCAL_MACHINE\SYSTEM\CServices\vspf
HKEY_LOCAL_MACHINE\SYSTEM\CServices\vspf_hk
HKEY_LOCAL_MACHINE\SYSTEM\CServices\VxD\VSPF_HK
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_FWSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVKERNEL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VSPF
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VSPF_HK
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINANTIVIRUS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WFSF
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinAntivirus
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinAntivirus
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinAntivirus
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vspf_hk
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WFSF
HKEY_CURRENT_USER\Software\pachek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\windefend.exe

News for Oct 13, 2008

New Version!
PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More...

	Download Demo Version
	Buy Now!

Buy Online

	Online Store



	Discount Pricing

Spyware Research

Browse our Spyware Research Center.

	Spyware Research

Free Newsletter

Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products!

	Click Here to Sign Up