Search
Keyword: usoj_fakeav.zzs
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. When users agree to buy the software, it connects to a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. As of this writing, the said sites are inaccessible. It
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be manually installed by a user. It displays fake
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. When users agree to buy the software, it connects to a
This is the Trend Micro detection for shortcut files (.LNK) used as a component by FAKEAV malware. This Trojan may be dropped by other malware. Arrival Details This Trojan may be dropped by the
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan executes the downloaded files. As a result, malicious routines of the downloaded files are exhibited on the affected system. Download Routine This Trojan accesses the following websites
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
It drops component files that Trend Micro also detects as TROJ_FAKEAV.CAC. This Trojan may be downloaded by other malware/grayware/spyware from remote sites. It may be unknowingly downloaded by a
intended routine. “Most Recent Earthquake In Japan” Searches Lead to FAKEAV Downloads files, Displays fake alerts
Trend Micro has flagged this Trojan as noteworthy due to the increased potential for damage, propagation, or both, that it possesses. Specifically, it poses as a rogue antivirus software. To get a
This Trojan moves .LNK files to the folder it creates and modifies the attributes of the files found in the affected system. This tricks the users into believing that the files have been deleted.
This Trojan moves .LNK files to the created folder %User Temp%\smtmp . It also modifies the attributes of files found in the affected system into Hidden , to trick the users that the files have been
}inumiden.com/up.php?{random characters} http://{BLOCKED}berot.com/up.php?{random characters} NOTES: This is a component of a FAKEAV malware. Trojan:Win32/FakeSysdef (Microsoft); Generic FakeAlert.bz (McAfee);
screenshots of the fake activation GUI and the FAKEAV website: It is usually dropped by its main malware as %Program Files%\Internet Protection\Internet Protection.dll. Mal/FakeAV-KG (Sophos) DLL-Based FAKEAV
This is Trend Micro's smart detection for a group of FAKEAV variants. This is the Trend Micro detection for files that exhibit certain behaviors. It displays fake alerts that warn users of infection.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a