AntivirusGold Trojan

Virus description: AntivirusGold
Category:Trojan
Another names:

[Other]AtiVirusGold,Troj/Fakevir-AI

AntivirusGold Detection :

Files:
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntivirusGold 5.1.lnk
[%DESKTOP%]\AntivirusGold 5.1.lnk
[%PROFILE%]\administrator\start menu\antivirusgold 2.0.lnk
[%PROFILE_TEMP%]\AGLanguage.ini
[%STARTMENU%]\AntivirusGold 5.1.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntivirusGold 5.1.lnk
[%DESKTOP%]\AntivirusGold 5.1.lnk
[%PROFILE%]\administrator\start menu\antivirusgold 2.0.lnk
[%PROFILE_TEMP%]\AGLanguage.ini
[%STARTMENU%]\AntivirusGold 5.1.lnk

Folders:
[%PROFILE%]\administrator\start menu\programs\antivirusgold
[%PROGRAMS%]\AntivirusGold 5.1
[%PROGRAM_FILES%]\antivirusgold
[%PROGRAM_FILES%]\AVG

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{020B1227-417D-4682-9AC3-61F43CB5B6B1}
HKEY_CLASSES_ROOT\CLSID\{125494B2-ACAD-414c-98B9-452F3EF7703A}
HKEY_CLASSES_ROOT\CLSID\{20A3D913-30EF-4e69-B3F7-93B3F1FB9D5C}
HKEY_CLASSES_ROOT\CLSID\{3D00A39C-655B-428b-AEB2-2FBA03DCC49C}
HKEY_CLASSES_ROOT\CLSID\{408F660A-9465-44a3-B557-8709DFD992BC}
HKEY_CLASSES_ROOT\CLSID\{5F6BBD8A-18CF-4d55-8B4C-C9B4C9328DFE}
HKEY_CLASSES_ROOT\CLSID\{8C56B6CE-C53F-44c4-9BDC-A9BC1711D05A}
HKEY_CLASSES_ROOT\CLSID\{8EE6BF73-B370-4d13-9126-EB0071178F2E}
HKEY_CLASSES_ROOT\CLSID\{97F56E12-C706-4aeb-9FFB-133C05EE5D38}
HKEY_CLASSES_ROOT\CLSID\{9BB7E700-4E48-476d-B75C-6F47606BE988}
HKEY_CLASSES_ROOT\CLSID\{CBCACA58-1AEE-4600-8CF0-E8B30BFF1535}
HKEY_CLASSES_ROOT\CLSID\{D6D64CDF-0363-4261-B723-29A3AF365E1D}
HKEY_LOCAL_MACHINE\SOFTWARE\AntivirusGold
HKEY_CLASSES_ROOT\appid\cerberus.exe
HKEY_CLASSES_ROOT\cerberus.enginelistener
HKEY_CLASSES_ROOT\cerberus.enginelistener.1
HKEY_CLASSES_ROOT\cerberus.scanner
HKEY_CLASSES_ROOT\cerberus.scanner.1
HKEY_CLASSES_ROOT\cerberus.threatcollection
HKEY_CLASSES_ROOT\cerberus.threatcollection.1
HKEY_CLASSES_ROOT\clsid\{020b1227-417d-4682-9ac3-61f43cb5b6b1}
HKEY_CLASSES_ROOT\clsid\{125494b2-acad-414c-98b9-452f3ef7703a}
HKEY_CLASSES_ROOT\clsid\{20a3d913-30ef-4e69-b3f7-93b3f1fb9d5c}
HKEY_CLASSES_ROOT\clsid\{3d00a39c-655b-428b-aeb2-2fba03dcc49c}
HKEY_CLASSES_ROOT\clsid\{408f660a-9465-44a3-b557-8709dfd992bc}
HKEY_CLASSES_ROOT\clsid\{5f6bbd8a-18cf-4d55-8b4c-c9b4c9328dfe}
HKEY_CLASSES_ROOT\clsid\{8c56b6ce-c53f-44c4-9bdc-a9bc1711d05a}
HKEY_CLASSES_ROOT\clsid\{8ee6bf73-b370-4d13-9126-eb0071178f2e}
HKEY_CLASSES_ROOT\clsid\{97f56e12-c706-4aeb-9ffb-133c05ee5d38}
HKEY_CLASSES_ROOT\clsid\{9bb7e700-4e48-476d-b75c-6f47606be988}
HKEY_CLASSES_ROOT\clsid\{9cb478a2-ca39-0cfd-efac-db80710601d3}
HKEY_CLASSES_ROOT\clsid\{cbcaca58-1aee-4600-8cf0-e8b30bff1535}
HKEY_CLASSES_ROOT\clsid\{d6d64cdf-0363-4261-b723-29a3af365e1d}
HKEY_CLASSES_ROOT\engine.backup
HKEY_CLASSES_ROOT\engine.backup.1
HKEY_CLASSES_ROOT\engine.log
HKEY_CLASSES_ROOT\engine.log.1
HKEY_CLASSES_ROOT\engine.logrecord
HKEY_CLASSES_ROOT\engine.logrecord.1
HKEY_CLASSES_ROOT\engine.paths
HKEY_CLASSES_ROOT\engine.paths.1
HKEY_CLASSES_ROOT\engine.quarantine
HKEY_CLASSES_ROOT\engine.quarantine.1
HKEY_CLASSES_ROOT\engine.runas
HKEY_CLASSES_ROOT\engine.runas.1
HKEY_CLASSES_ROOT\engine.searchitem
HKEY_CLASSES_ROOT\engine.searchitem.1
HKEY_CLASSES_ROOT\interface\{27ed4ac2-b6d8-4079-9831-017a100b391e}
HKEY_CLASSES_ROOT\interface\{3f6d6c35-fb73-45e6-9473-bb4cc25ce019}
HKEY_CLASSES_ROOT\interface\{715d709b-2b10-42fa-a069-297d25d93601}
HKEY_CLASSES_ROOT\interface\{872c1b1e-3cf0-4d3a-95e5-a0c662d2854c}
HKEY_CLASSES_ROOT\interface\{886b1d08-b404-40f0-aa18-4e416682a2e9}
HKEY_CLASSES_ROOT\interface\{8b5f65cf-0b0a-4291-8da2-86d7f7b0a6db}
HKEY_CLASSES_ROOT\interface\{925b0211-a1c1-4712-8fca-5f5b8101736d}
HKEY_CLASSES_ROOT\interface\{b01e37c4-5497-4d58-9ffd-d5653b8dc866}
HKEY_CLASSES_ROOT\interface\{ccaa201c-c48d-48a8-a1e8-846562cbf1c1}
HKEY_CLASSES_ROOT\interface\{d483521b-d5cc-43ff-a45a-9be4a8e6606e}
HKEY_CLASSES_ROOT\interface\{ed2aff47-b7be-4273-a203-c796e87f72d2}
HKEY_CLASSES_ROOT\interface\{f0fa7ed9-5a0a-4374-b63e-bebafd52192e}
HKEY_CLASSES_ROOT\interface\{f5dee77c-87eb-4e00-bbf9-8cbf3bdea7af}
HKEY_CLASSES_ROOT\interface\{fb5ddab7-6aa5-4e97-9541-5a75addf4aba}
HKEY_CLASSES_ROOT\interface\{fddf521b-0ebe-4d15-838c-73e2d851161b}
HKEY_CLASSES_ROOT\interface\{ff609434-eb47-481b-ba0e-1d2b467629a5}
HKEY_CLASSES_ROOT\typelib\{60f94d7d-563e-4942-b5ec-2de9c135c139}
HKEY_LOCAL_MACHINE\software\antivirusgold
HKEY_LOCAL_MACHINE\software\antivirusgold 5.1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antivirusgold 5.1.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antivirusgold.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antivirusgold
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antivirusgold 5.1

Registry Values:
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing AntivirusGold:

you can run trial version of ExterminateIt, or remove AntivirusGold manually..

---

ExterminateIt effectively and automatically removes Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware) from you computer.

Download ExterminateIt! to instantly get rid of AntivirusGold!

---

Also Be Aware of the Following Threats:
Doly Trojan Information
Ambulance Trojan Removal