My Bitdefender
  • 0 Shopping Cart

SHARE
THIS ON

Facebook Twitter Google Plus

Trojan.Downloader.FakeAV.AH

MEDIUM
LOW
Variable

Symptoms

No obvious symptoms.

Removal instructions:

Please let BitDefender disinfect your files.

Analyzed By

Lutas Andrei Vlad, virus researcher

Technical Description:

This is the kind of malware that makes use of users naivity in order to download and execute other malware on their computers. When an infected web-page is accesed, several warning messages are diplayed, in order to trick the unaware user to acces an infected link. Typical messages can be: 

"Your computer contains various signs of viruses and malware programs presence.
Your system requires immediate anti viruses check!
Antivirus 360 will perform a quick and free scanning of your PC for viruses and malicious programs."


"Your computer remains infected by viruses!
They can cause data loss and file damages and need to be cured as soon as possible.
Return to Antivirus 360 and download it secure to your PC"


"Your computer remains infected by viruses!
They can cause data loss and file damages and need to be cured as soon as possible.
Return to Antivirus 360 and download it secure to your PC"


The fake-scanning of the computer will reveal unexistent malware and may display several other messages:
"This program is potentially dangerous for your system. Trojan-Downloader stealing passwords,
credit cards and other personal information from your computer.
Advice:
You need to remove this threat as soon as possible!"

Other possible fake malware detections:
Email-Worm.Win32.Net
Email-Worm.Win32.Myd
Trojan-Downloader.Win

The downloader may also act different if it is running on a Windows XP with Service Pack 2, by directly launching the download-page in a new window when the user tries to close it or by simply displaying a modal-dialog with download option. Either way, the user ends up on the download page of AV 360 and might be tempted to install this fake antivirus and even pay for registration.