high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | July 2008 (4.31) |
| Protection available since | 13 May 2008 10:08:06 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/FakeAle-BF is a Trojan for the Windows platform.
Troj/FakeAle-BF includes functionality to access the internet and communicate with a remote server via HTTP.
When first run Troj/FakeAle-BF copies itself to <Program Files>\Antivirus 2008\Antvrs.exe and creates the following files:
<User>\Start Menu\Antivirus\Antivirus 2008.lnk
<User>\Start Menu\Antivirus\Uninstall Antivirus.lnk
The following registry entry is created to run Antvrs.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Antivirus
<Program Files>\Antivirus 2008\Antvrs.exe
Registry entries are created under:
HKCU\Software\Antivirus
HKLM\SOFTWARE\Antivirus
|
