Sophos

Troj/FakeVir-CR

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Drops more malware
  • Installs itself in the registry
Protection available since 4 July 2008 18:39:24 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/FaveVir-CR is a Trojan for the Windows platform. This program masquerades as genuine anti-virus software while reporting the false detection of viruses and spyware. The user is enticed to purchase the ability to remove the imaginary detected threats.

The following registry entry is created to run Troj/FakeVir-CR when Windows starts:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Doctor Antivirus 2008
<Path to Trojan>\atnvr.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer