high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | June 2008 (4.30) |
| Protection available since | 16 April 2008 06:46:40 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/FakeAV-M is fake anti-spyware software for the Windows platform.
Troj/FakeAV-M creates Windows Balloon to display the following message:
Title: WARNING: Your computer is infected
Text: Windows has detected spyware infection! Click this message to install the last update of Windows security software..
When the user clicks the message a web page is opened containing links to download / buy fake antispyware software.
When first run Troj/FakeAV-M changes/sets the following registry entries to run itself on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
<Random CLSID>
<Pathname of current file>
|
