Trojan.FakeAV
Trojan.FakeAV Description
Trojan.FakeAV is from a family of Trojans that assist in the spread of fake anti-spyware and anti-virus applications. Trojan.FakeAV may download malicious files onto a compromised PC and display frequent pop-ups and fake virus alerts. Trojan.FakeAV may also be associated with botnet activities. You can remove Trojan.FakeAV and its related rogueware with a trustworthy computer security program.
Type: Trojans
Aliases: Trojan:Win32/FakeXPA [Microsoft], Trojan-Downloader.Win32.FraudLoad.wvlh [Kaspersky Lab], Mal/EncPk-KH [Sophos].
How Can You Detect Trojan.FakeAV?
Trojan.FakeAV Technical Report
As new Trojan.FakeAV details are reported by our customers and findings from our Threat Research Center, we will update this section.
The following Trojan.FakeAV files with its MD5s were created in the system:
| File Name | File Size | MD5 |
|---|
| CLADD | 2560 | e229a2fa3acd3f307ede63b89db833a4 |
| WI3e94.exe | 1943552 | 02fed38ea8975716f5f8f2595f905010 |
| services.exe | 47616 | da9976cd71469bbcf0f87ec40e2ce798 |
| ddexpshare.exe | 790528 | 8b4840953e5511d0a08ee67ff0034e2c |
Trojan.FakeAV creates the following registry entries:
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*]
Important Article Disclaimer

English 
Deutsch
Español
Français
Portuguese
Trojan.FakeAV 











