luni, 12 decembrie 2022

Windows Optimization Center

Windows Optimization Center is a bogus fake antivirus software after the PrivacyGuard2010 Fiasco the large clones and familities are easy spread by fake movies.
Once the user download the fake movie like movie.avi.exe it had a hidden executable extension.

When started it display a fake microsoft security essentials alert blocking apps like Procexp regedit taskmgr cmd and other possible applications.







By getting forced to clean computer apply actions and scan online it recommend to install the bogus software






After the Reboot it replace explorer.exe the logon shell with the rogue using random characters or in this first version of the large rogues from Fake PAV it goes as protect.exe
When protected mode started the interface start to fake its own viruses privacy issues software and perfomance problems



Possible fake scan and sound the windows logon sound everytime

            
The rest of the interface and its own fake results even after buying didnt resolve anything.








Errors about "outdated license"


And in this about section it attempt to convince users that the product is not malicious even in sites and malware blogs containing the product



Blocking taskmgr iexplore regedit cmd and other programs but not limited to explorer and mstha the component by this malware
Fake alert in pop up
In his delimited way to block programs but a simple trick would help if this virus is not capable also to invade the Safe mode with networking and safe mode simple except the safe mode with command prompt.
Once registred or hacked with a loader renames as csrss.exe the virus stop blocking and activated the full version
Fake optimization i'm sure


The virus also says that the license expire in 2023 and 2024 but this cannot expire in any date

When registred it deploy the shortcut on desktop



MD5 For sample : 34e73a4663cd17112ef5ca618ac3cb34
Test ON VIRTUALMACHINE but when infected the activator or registry hacks may save your host PC


Niciun comentariu:

Trimiteți un comentariu