Threat Database Trojans Mal/FakeVirPk-B

Mal/FakeVirPk-B

Threat Scorecard

Ranking: 10,184
Threat Level: 90 % (High)
Infected Computers: 2,202
First Seen: July 24, 2009
Last Seen: September 6, 2023
OS(es) Affected: Windows

Mal/FakeVirPk-B is typically used by cyber-criminals to distribute fake anti-spyware applications. Once Mal/FakeVirPk-B is on a system it may display fake security warning and conduct fake system scans. Mal/FakeVirPk-B also modifies certain system settings and creates a start-up registry entry. Mal/FakeVirPk-B may also download additional parasites onto a victim's PC.

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Antiy-AVL Hoax/Win32.Agent.gen
AntiVir TR/Agent.amy.1
Kaspersky Hoax.Win32.Agent.amy
McAfee Artemis!7B948792C642
AVG WinFixer.IV
Ikarus not-a-virus
Antiy-AVL FraudTool/Win32.BestSeller.gen
AntiVir APPL/WinFixer.46592
Comodo Application.Win32.Adware.AVSystemCare
BitDefender Application.Winfixer.BD
Kaspersky not-a-virus:FraudTool.Win32.BestSeller.a
eSafe FraudTool.Win32.Best
F-Prot W32/KillAV.I.gen!Eldorado
K7AntiVirus Adware
CAT-QuickHeal FraudTool.BestSeller.a (Not a Virus)

SpyHunter Detects & Remove Mal/FakeVirPk-B

File System Details

Mal/FakeVirPk-B may create the following file(s):
# File Name MD5 Detections
1. gotnewupdate.exe 09add4d89b20e1266c00d2e764ff9644 206
2. winlogon32.exe 4a0ab091489f7f9dcf298b2b9dd07582 166
3. winlogon32.exe db41868587c95a01aaa2f1b254f37c88 151
4. SpeedTouchKey.exe 7b948792c642e6825b2066f28325a9e2 10
5. winupgro.exe d84367293f7e7c61eea347b767f91a38 9
6. setup_de.exe dba6689c1423c4387449c2ac6686c8e4 7
7. winantiviruspro2006freeinstall_nl[1].exe b56edb2b32396c4e44222f12fc630d83 5
8. CAMG.exe 0c1c2bbf64fa693264aaf77ec1fceaf0 3
9. newsoftwareinstaller[1].exe 6b45cbb5ff302933b36aaadfe2fbff42 2
10. Hk1.exe 03cd94952410f824f7329050cf9ad29e 1
11. Bf1.exe f9743700d3cd77234573155142876a57 1
12. winupdate86.exe 5155c4617976cb5805343d57e7a2b797 0
13. winupdate86.exe 8e36fdfa3a6fdc319d2fa8a5948fc481 0
14. winupdate86.exe 995945f39df67f488de242f9d4ad199c 0
15. winlogon86.exe a40a24c6d7fa3a13a8012e834eccd7f2 0
16. winupdate86.exe 1627e265f51033d59acb9fd703f016a9 0
17. winupdate86.exe 48b6e39590da6ba36da9a02b86aeebf9 0
18. winupdate86.exe de4a872ee7abd0ef6dd4187c49e7dcf5 0
19. winupdate86.exe 9b67c07f189a296d2ab5400525e51220 0
20. winupdate86.exe 12f88b44d471fc3b93468d5d5b8d428c 0
21. helpers32.dll a0b5ab35d0f89bd0007a00585da0447f 0
22. helpers32.dll cf58f782b58ff0dd8e959227db3c2532 0
23. smss32.exe 08e04bbb91e80fdad83b34783a083904 0
24. svchost32.exe e100dc56587c4b7261c1343a56d7423c 0
25. svchost.exe fe403a64c7a0dc2135de8b7ea12c5235 0
26. setup.exe be7a3a0203947d2d4e48835d6ea76327 0
27. smss32.exe e8a1cee6410615c7536599962f6a06f0 0
More files

Registry Details

Mal/FakeVirPk-B may create the following registry entry or registry entries:
CLSID
{376892AE-1825-4E5F-9F85-23F9640051CC}
{94204837-0871-4E6A-A426-7F75B1B731F0}
File name without path
msa.exe
smss32.exe
Software\Microsoft\Internet Explorer\Toolbar\{12A25CE9-0A93-4074-9516-A5B1A83141C9}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{FCCD9F7B-5BF3-4DC4-B131-CE069F8A62AB}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{FF20AF38-AD56-4361-AE03-339130767E26}

URLs

Mal/FakeVirPk-B may call the following URLs:

cubeexe.com
securityonlinecomputer.net

Trending

Most Viewed

Loading...