Sophos

Troj/Fakezo-A

Aliases
  • Trojan-Dropper.Win32.Agent.sg
  • BackDoor-CKB
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Drops more malware
Protection available since 16 August 2005 20:13:03 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Fakezo-A is a Trojan for the Windows platform.

When Troj/Fakezo-A is installed the following files are created in the same folder as Troj/Fakezo-A:

10123.exe
20n1.exe
FixZotob.exe

Troj/Fakezo-A claims to be a Symantec tool to clean a computer infected with W32/Zotob-A and W32/Zotob-B. This tool is in fact the file dropped as FixZotob.exe.

10123.EXE is detected as Troj/Bifrose-DC. 20N1.EXE is detected as Troj/Winflux-C.

Troj/Fakezo-A may display a message box with non-Roman characters.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer