Infopirate.org

XP Antivirus in ActionThe consequences of XP antivirus can be described by this message, which with minor alterations appear on Yahoo! Answers daily:

This worm may be downloaded unknowingly by a user when visiting malicious Web sites.

This worm drops copies of itself. It also drops component files which Trend Micro detects as MAL_OTORUN2.

This worm creates registry entries to enable its automatic execution at every system startup. It also uses Windows Task Scheduler to create a scheduled task that it uses to executes a dropped copy.

This is the Trend Micro detection for HyperText Markup Language (HTML) pages and compromised Web sites that contain malicious iFrame tags. It may be hosted on a Web site and run when a user accesses the said Web site.

Once an unsuspecting user views an infected Web page, it attempts to connect to a remote URL. As of this writing, however, the said URL is inaccessible.

This JavaScript may be hosted on a Web site and run when a user accesses the said Web site.

This JavaScript connects to remote URLs. As a result, malicious routines of the downloaded files are exhibited on the affected system. However, note that as of this writing, the said URLs are inaccessible.

This Trojan may be dropped by other malware. It may be installed manually by a user.

It poses as an antispyware application that uses pop-up messages on the system tray, tricking users into thinking that the system is infected. The said routine tricks users into purchasing the complete version of the said application.

This Trojan may be dropped by other malware.It may arrive as a .DLL file that exports functions used by other malware. It requires its main component to perform its intended routine.

It modifies registry entries to enable its automatic execution at every system startup.

This Trojan may be dropped by other malware.

It may arrive as a .DLL file that exports functions used by other malware.

It requires other components in order to run properly.