Troj/FakeAV-AJC

Aliases

* Trojan.Win32.FraudPack.afbi
* Trojan:Win32/FakeSmoke

Category

* Viruses and Spyware

Type

* Trojan


Affected operating systems Windows
Characteristics

* Installs itself in the registry


Troj/FakeAV-AJC is a Trojan for the Windows platform.

Troj/FakeAV-AJC includes functionality to steal confidential information.

When Troj/FakeAV-AJC is installed the following file is created and detected as Troj/FakeAV-AJC:

<Program Files>\ProtectPcs Software\ProtectPcs\ProtectPcs.exe

When Troj/FakeAV-AJC is installed the following files are also created:

<Program Files>\ProtectPcs Software\ProtectPcs\uninstall.exe
<Desktop>\ProtectPcs.lnk
<Start Menu\Programs>\ProtectPcs\1 ProtectPcs.lnk
<Start Menu\Programs>\ProtectPcs\2 Homepage.lnk
<Start Menu\Programs>\ProtectPcs\3 Uninstall.lnk

Registry entries are created under:

HKLM\SOFTWARE\ProtectPcs
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProtectPcs

Troj/FakeAV-AJC provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "ProtectPcs".

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakeavajc.html?_log_from=rss