- Threat Encyclopedia
- Malware
- OSX_FAVDONW.A
Trojan-Downloader.OSX.FavDonw.c (Kaspersky); OSX/FakeAV-DWN (Sophos); Trojan-Downloader.OSX.Fav.A (Clamav); Trojan-Downloader.OSX.FavDonw (Ikarus)
Mac OS
Upon execution, this malware prompts the installation of fake antivirus application.
Once installed, it may download and install the fake antivirus/antispyware software, MacShield from a certain URL.
The said malware is already detected as OSX_FAKEAV.HXZ.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
71,680 bytes
Other
Yes
06 Jun 2011
Displays fake alerts
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This Trojan drops the following files:
NOTES:
Upon execution, it prompts the installation of fake antivirus application:
Once installed, it may download and install the fake antivirus/antispyware software, MacShield from the following URL:
The said malware is already detected as OSX_FAKEAV.HXZ.
8.900
8.206.08
06 Jun 2011
NOTES: