high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 18 April 2008 07:45:27 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/FakeAV-L is fake anti-spyware software for the Windows platform.
Troj/FakeAV-L creates Windows Balloon to display the following message:
Title: WARNING: Your computer is infected
Text: Windows has detected spyware infection! Click this message to install the last update of Windows security software..
When the user clicks the message a web page is opened containing links to download / buy fake antispyware software.
Troj/FakeAV-L creates Windows MsgBox to display the following message:
Title: WARNING: Your computer is infected
Text: Windows has detected spyware infection! Click this message to install the last update of Windows security software..
When the user clicks the button a web page is opened containing links to download / buy fake antispyware software.
When first run Troj/FakeAV-L changes/sets the following registry entries to run itself on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
<Random CLSID>
<Pathname of current file>
|
