F-Secure
Tools
Rogue:W32/BraveSentry
Summary
Dishonest antivirus software which tricks users into buying or installing it, usually by infecting a user's computer, or by pretending the computer is infected.Additional Details
Rogue:W32/BraveSentry is a rogue antivirus program that reports fake scanning results to the user in order to dupe them into purchasing the "professional" version of the product.
The rogue indicates that the user "shuld purchase a license" to remove any threats found:
Upon running the evaluation, this rogue will display a window similar to this one:
If something is found the rogue can issue warnings like this:
When you press the close button, it will be minimized to the system tray and display this:
It will also install itself in the system via these registry keys:
The rogue indicates that the user "shuld purchase a license" to remove any threats found:
Upon running the evaluation, this rogue will display a window similar to this one:
If something is found the rogue can issue warnings like this:
When you press the close button, it will be minimized to the system tray and display this:
It will also install itself in the system via these registry keys:
- HKEY_CURRENT_USER\Software\BraveSentry
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BraveSentry