Sophos

Troj/FakeAle-BY

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from July 2008 (4.31)
Protection available since 10 June 2008 00:19:50 (GMT)
Detected by All Sophos products

Action

More Information

Troj/FakeAle-BY displays a fake alert that the computer is infected.

Troj/FakeAle-BY copies itself to <System>\ctfmona.exe.

Troj/FakeAle-BY creates the registry value
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
ctfmona
<System>\ctfmona.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer