Threat Database Trojans FakeAlert-SpyPro.gen.bb!B5D8E1878EFA

FakeAlert-SpyPro.gen.bb!B5D8E1878EFA

By Domesticus in Trojans

FakeAlert-SpyPro.gen.bb!B5D8E1878EFA is a Trojan infection that comes bundled with and executes Antivirus Scan- a fake security program. Once Antivirus Scan is inside a PC it will modify browser settings and cause constant redirections to Softwareea.com. Together these rogues will work to convince a victim that his or system is infected with malware that can only be removed with the licensed version of Antivirus Scan which a victim must pay for. Remove FakeAlert-SpyPro.gen.bb!B5D8E1878EFA from your PC upon detection.

File System Details

FakeAlert-SpyPro.gen.bb!B5D8E1878EFA may create the following file(s):
# File Name Detections
1. %Temp%\[random]\[random].exe
2. %Temp%\[random]\

Registry Details

FakeAlert-SpyPro.gen.bb!B5D8E1878EFA may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter ?Enabled? = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:59274'
HKEY_CURRENT_USER\Softwae\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.exe'

Trending

Most Viewed

Loading...