Thursday, 21 July 2011

Total Protect

According to S!Ri (and thanks for the sample)
Total Protect is a rogue anti-virus application. This .NET fake AV displays fake alerts and prevent legit software execution to scare users.

On their site, they use Bitdefender logo, fake partners list to mislead users.

When infected you can found the rogue in /%APPDATA%/
There is no serial form, for this fakeAV.


  1. No serial form!?What the hell?Did that fake av created in visual basic 2008 or 2010?!

  2. Dunno, just vb .net
    And yes, there is no option to 'enable feature' even when bought.
    no serial, no hwid check, no registration dialog.