Troj/FakeAV-BEG is a Trojan for the Windows platform.
Troj/FakeAV-BEG includes functionality to:
- run automatically
- access the internet and communicate with a remote server via HTTP
Troj/FakeAV-BEG communicates via HTTP with the following locations:
windowsupdate . microsoft . com
secureplace . biz
When Troj/FakeAV-BEG is installed the following files are created:
<Common Files>\Microsoft Shared\DW\1042\ReportingDWIntl20.exe
<Program Files>\Messenger\msmsgsWindows.exe
<Program Files>\notepadpp\ScintillaNotepad.exe