 |
Security News
Supposed Avira key generator contains malware
Tue, 22 September 2009
So-called key generators for Avia AntiVir have recently turned up on Internet exchange sites, but instead of giving users a valid license key, they load an autorun worm
Tettnang, 22 September 2009 – Key generators for Avia AntiVir products turned up last weekend on Internet exchange sites, promising users an illegal free license. But instead of getting a license key, users find that a harmful worm has been installed on their system.
A key generator is a piece of software that produces a free license key for a program for which a charge is usually made. In this case, as well as a current demo version of Avira AntiVir Premium, users also receive the “Avira Anti-Virus KeyGen.exe” file. After this has been run, it creates the following harmful files “< % Profile Folder AllUsers % >\Local Settings\Application Data\scvhost.exe”, “C:\Sys.exe” and “C:\autorun.inf”. The scvhost.exe file also anchors itself in the system registry, so that it is executed at every reboot. The malware also infects USB storage media, enabling it to spread. Further details about the threat can be found at Avira TechBlog. Avira detects the damaging software with virus definition file 7.1.6.18 as Worm/Autorun.sxa.
Key generators have long been used by cybercriminals as access point where user’s systems can be infected. Therefore, any message from the virus scanner when key generators are used or in relation to sites where key generators are available to download should be taken very seriously. Otherwise you run the risk of turning your computer into part of an illegal botnet, for example. Anyone wishing to avoid malware and who also wishes to play it safe from a legal perspective is advised by Avira not to use free key generators.
About Avira
Avira is a leading global provider of IT security solutions for professional and private use. With over twenty years of experience, the company is one of the pioneers in this field. As a foundation member of the initiative “IT Security made in Germany” (ITSMIG e.V.), Avira guarantees that it provides IT security products with no backdoors.
The German IT security expert is headquartered in Tettnang near Lake Constance and maintains several subsidiaries worldwide. Avira employs approximately 300 staff and makes a significant contribution towards the security of millions of private users through its free virus protection, Avira AntiVir Personal.
Domestic and international customers include well-known companies listed on global stock exchanges, educational establishments and government authorities. In addition to protecting the virtual environment, Avira promotes the Auerbach Foundation for greater protection and security in the real world. The Auerbach Foundation supports charitable and social projects, as well as art, culture and science.
 Print this page
|
|
Virus threats 
.gif)
