ContraVirus

ContraVirus, is a Rogue Spyware application that poses as a legitimate anti- spyware program. The application uses a false scanner to force computer users to pay for removal of non-existent spyware items. It may also be known as ExpertAntivirus

Methods of Infection

ContraVirus may be downloaded as a Trojan Horse, with other software. Typically, it may be installed by the SmitFraud trojan.

Symptoms of infection

ContraVirus has been known to display fake messages stating that your computer is infected with spyware. It may also install the files c:\WINDOWS\wincom27.dll and c:\WINDOWS\system\ext32inc.dll, in order to persuade a user to purchase the software. Traditionally a user will see Contravirus running a "scan" of their computer at which time a user will be prompted to purchase the Contravirus software to remove the threat. It may also Hijack a user's browser and install a toolbar.

Microsoft Windows versions affected, 95, 98, Me, NT, XP, Server 2003, 2000, Server 2003, Vista.

Removal

Removal of Contravirus is difficult and may require assistance from qualified IT Support Personnel. However, users have had success removing the program using the SmitFraudFix.zip program, as well as well known programs Kaspersky Anti-Virus, Spybot Search & Destroy, and the Norton Family of Security products.

See also

• Trojan
• Spyware
• Malware
• Grayware

External links

• Symantec Security
• F-secure
• www.frsirt.com
• www.xp-vista.com