By Domesticus in Trojans

Threat Scorecard

Ranking: 16,198
Threat Level: 40 % (Medium)
Infected Computers: 62
First Seen: July 24, 2009
Last Seen: September 6, 2023
OS(es) Affected: Windows

Hoax.Renos is a trojan employed by many rogue anti-spyware applications in order to persuade the user to purchase those applications. This is usually done by generating fake security alerts and notifying the user of non-existent threats. Hoax.Renos usually uses ActiveX controls and various browser security holes in order to infect potential victim machines. This trojan is known to be very difficult to remove.


15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Symantec Downloader.MisleadApp
Sunbelt Trojan-Downloader.Win32.CodecPack (v)
Sophos Mal/EncPk-HW
McAfee-GW-Edition Trojan.Agent.cdw.C
McAfee Generic Dropper.cx
Fortinet W32/Dropper.CX!tr
eSafe Win32.GenericDropper
BitDefender Trojan.Renos.NIQ
AVG Dropper.Generic.AQBP
AntiVir TR/Agent.cdw.C
Symantec Trojan.Fakeavalert
Sunbelt Trojan.FakeAlert
Sophos Mal/FakeAlert-A
Prevx1 Fraudulent Security Program

SpyHunter Detects & Remove Hoax.Renos

File System Details

Hoax.Renos may create the following file(s):
# File Name MD5 Detections
1. tempo-139421.tmp 46cd680d6d08b4369164fcd6ff1ab20d 0
2. rtmipr.dll 5590b0d943592f7046664f86cbbbe369 0
3. autorun.exe, Templx10049.exe, vs10049[1].exe, findfast.exe, shell.exe, printer.exe, spoolvs.exe 84e8d514487562dcc6b36a8e551b2d19 0
4. spoolvs.exe 70bec45867c8c26154aab921d40fd112 0
5. akhwjhpi.exe 8d2d474f887e617238ab0ef30f7d0743 0
6. aakaafjy.dll 5d2e7706260e6b3b7c3ae3e6dc6b369e 0
7. akjsfmea.dll 1a580f5d4369277c1db23a9d52c4e3cb 0
8. autorun.exe 8c194d5a3a785c6a1e1d3d810e2a3d1b 0
9. kxfcedlq.dll 3b6330ba64de6dcab23e1cf936f0222f 0
10. anr10041.exe, Tempwn10041.exe, us10041[1].exe, us10041[1].exe fd36b4139f13e6cc5c8e81b6b4df8ff3 0
11. axuilelx.exe f99db1c2b5126d347066cf5ba1d9bfff 0
12. autorun.exe, Templx10041.exe, vs10041[1].exe, findfast.exe, shell.exe, printer.exe, spoolvs.exe a4e7ff8876b6d5dea5f9c5576d857354 0

Registry Details

Hoax.Renos may create the following registry entry or registry entries:
File name without path
Run keys

Related Posts


Most Viewed