What We Do
- Your Needs
  Security Goals
  INDUSTRIES & SECTORS
  COMPANY SIZE
  PRODUCT FEATURES
  CASE STUDIES
  - Education
  - Financial
  - Government
  - Healthcare
  - Technology
  - Other
- Why Sophos
  Company Overview
  Our People
  INNOVATIVE TECHNOLOGY
  ALERT SERVICES
- Products
  Product Features
  Product Families
  - Unified (formerly Astaro)
  - Endpoint
  - Network
  - Encryption
  - Web
  - Email
  - Mobile
  Complete Security
  - All-in-One Security Suites
  PRODUCTS BY NAME
  - Products A-Z
  Free Tools
  Next Steps
  RESOURCES
Getting Answers
- Support
  FIND AN ANSWER
  Support by Product
  - > View all
  Maintain your Product
  Hire an Expert
  WHAT'S POPULAR
- Threat Center
  THREAT ANALYSIS
  THREAT STATISTICS
  WHAT'S POPULAR
  Threat Definitions
  - A-Z of Threats
  THREAT MONITORING
What's Happening
- Security News/Trends
  SECURITY HUBS
  LIBRARY
  Whats Popular
  WHAT'S NEW
  Community
  - Naked Security
  - Connect with Us
  IT SECURITY TRAINING
  ANATOMY OF AN ATTACK
- Partners
  RESELLER PARTNERS
  - Overview
  - Why Partner with Sophos?
  Managed Service Providers
  - Overview
  SYSTEM INTEGRATORS
  - Overview
  OEM and Technology
  WHAT'S POPULAR

Troj/FakeAV-DFF

Category:	Viruses and Spyware	Protection available since:	16 Apr 2011 14:28:13 (GMT)
Type:	Trojan	Last Updated:	16 Apr 2011 14:28:13 (GMT)
Prevalence:

Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/FakeAV-DFF exhibits the following characteristics:

File Information

Size: 407K
SHA-1: 8a33b1032fab57c7f9e0801c853226faa94f429e
MD5: c53839a59f0b0243c8c4d21813bf0b87
CRC-32: ac77a554
File type: application/x-ms-dos-executable
First seen: 2011-04-16

Runtime Analysis

Dropped Files

C:\sample
Size
192
SHA-1
ca05481842b3b75a9c62804688f42577f4ec557e
MD5
b0ec76fc6b208539fc656d6fabeed60c
CRC-32
e849153a
File type
application/octet-stream
First seen
2011-04-16

Processes Created

c:\windows\explorer.exe

Try Sophos products for free
Download now