Trojan.FakeAlert.PP
( Adware.XPAntivirus )
|
Spreading:
|
very low
|
|
|
Damage:
|
very low
|
|
Size:
|
aprox 1 kb
|
|
Discovered:
|
2008 Feb 28
|
SYMPTOMS:
- You receive an offer on a website to scan your computer : "XP antivirus will scan your system for threats now."
- It ask you to run an application that is supposedly clean : "Please select "RUN" or "OPEN" when prompted to start the installation. This file has been digitally signed and independently certified as 100% free of viruses, adware and spyware."
- Appearance of messages that sustain the computer is infected : "ATTENTION! If your computer is infected, you could suffer data loss, erratic PC behaviour, PC freezes and creahes" and urge you to use XP Antivirus.
TECHNICAL DESCRIPTION:
- This malware warns you about fake infections in your computer and requests a scan with the rogue antivirus "XP Antivirus". You can see the description to that unwanted program here : http://www.bitdefender.com/VIRUS-1000255-en--Adware.XPantivirus.A.html.
- Then it downloads an installer from the product's website ( http://xpantivirus.com )
- It installs the fake antivirus product in your system with the following path : " %program files% \ XPAntivirus\xpa.exe "
Removal instructions:
Please let BitDefender disinfect your files.
ANALYZED BY:
Daniel Chipiristeanu, virus researcher
