Troj/FakeAV-AZP is a Trojan for the Windows platform.
Troj/FakeAV-AZP includes functionality to:
- run automatically
- create batch scripts
- access the internet and communicate with a remote server via HTTP
Troj/FakeAV-AZP communicates via HTTP with the following locations:
89 . 248 . 174 . 12
When Troj/FakeAV-AZP is installed the following files are created:
<User>\Application Data\16263321\16263321.exe
<Desktop>\Security Tool.lnk
<Start Menu\Programs>\Security Tool.lnk
Registry entries are created under:
HKLM\SOFTWARE\16263321
HKLM\SOFTWARE