Threat Search: 

ThreatExpert's Statistics for FakeAlert-WinwebSecurity.gen [McAfee]:

FakeAlert-WinwebSecurity.gen [McAfee] is also known as:
Threat AliasNumber of Incidents
Trojan:Win32/Winwebsec [Microsoft]93
Mal/FakeAV-AD [Sophos]84
Downloader.MisleadApp [Symantec]42
Trojan:Win32/FakeXPA [Microsoft]40
Trojan.Fakeavalert [Symantec]29
Generic.Win32.Malware [Ikarus]22
Mal/FakeAV-AD, Mal/FakeAV-AK [Sophos]21
Mal/FakeAV-AK [Sophos]21
Packed.Generic.243 [Symantec]17
Program:Win32/Winwebsec [Microsoft]16
Trojan-Downloader.Win32.FraudLoad.ebt [Kaspersky Lab]16
Trojan.Win32.Winwebsec [Ikarus]14
AntiVirus2008 [Symantec]12
Mal/FakeAV-AK, Mal/FakeAV-AD [Sophos]12
Packed.Win32.Krap.w [Kaspersky Lab]12
Win-Trojan/Fraudload.271390 [AhnLab]12
Mal/EncPk-IF, Mal/FakeAV-AD, Mal/FakeAV-AK [Sophos]10
not-a-virus:FraudTool.Win32.SystemSecurity.ic [Kaspersky Lab]8
Mal/FakeAV-AD, Mal/EncPk-JX [Sophos]7
Mal/FakeAV-AU, Mal/EncPk-HH [Sophos]7
Suspicious.MH690 [Symantec]7
Win-Trojan/Xema.variant [AhnLab]7
Mal/FakeAV-Y [Sophos]6
Mal/EncPk-HH [Sophos]5
Mal/FakeAV-AK, Mal/FakeAV-AA [Sophos]5
not-a-virus:FraudTool.Win32.SystemSecurity.cbc [Kaspersky Lab]5
Packed.Generic.234 [Symantec]5
Mal/Generic-A [Sophos]4
not-a-virus:FraudTool.Win32.SystemSecurity.cba [Kaspersky Lab]4
Packed.Generic.218 [Symantec]4
Trojan.Win32.Bredolab [Ikarus]4
XPAntivirus [Symantec]4
FakeAlert-WinwebSecurity.a [McAfee]3
Mal/FakeAV-AU [Sophos]3
Mal/FakeAV-AX [Sophos]3
not-a-virus:FraudTool.Win32.SystemSecurity [Ikarus]3
Packed.Generic.233 [Symantec]3
Troj/FakeAV-ATD [Sophos]3
Trojan-Downloader.Win32.FraudLoad [Ikarus]3
Trojan-Downloader.Win32.FraudLoad.glk [Kaspersky Lab]3
Trojan-Downloader.Win32.Onestage [Ikarus]3
Downloader [Symantec]2
Downloader.MisleadApp [PC Tools]2
Mal/EncPk-IF [Sophos]2
Mal/FakeAV-AD, Mal/BredoPk-B [Sophos]2
Mal/FakeAV-AD, Mal/EncPk-IF, Mal/FakeAV-AK [Sophos]2
Mal/FakeAV-AD, Mal/EncPk-IV [Sophos]2
Packed.Win32.Krap [Ikarus]2
RogueAntiSpyware.AntiVirusN1 [PC Tools]2
Troj/FakeAle-MV [Sophos]2
TROJ_FAKEAV.ALU [Trend Micro]2
Trojan Horse [Symantec]2
Trojan.FakeAlert [PC Tools]2
Trojan.Win32.FakeXPA [Ikarus]2
Trojan.Win32.FraudPack.nhb [Kaspersky Lab]2
Trojan.Win32.FraudPack.usd [Kaspersky Lab]2
Trojan-Downloader.Win32.Delf [Ikarus]2
Trojan-Downloader.Win32.FraudLoad.eik [Kaspersky Lab]2
Trojan-Downloader.Win32.FraudLoad.vskq [Kaspersky Lab]2
Trojan-Downloader.Win32.FraudLoad.wfpz [Kaspersky Lab]2
Trojan-Dropper.Win32.FrauDrop.gn [Kaspersky Lab]2
Virus.Win32.SdBot [Ikarus]2
Win-Trojan/Fakeav.741440 [AhnLab]2
Win-Trojan/Fraudload.45568.H [AhnLab]2
Win-Trojan/Onestage.127005 [AhnLab]2
Win-Trojan/Onestage.70173 [AhnLab]2
AntiVirus2009 [Symantec]1
Backdoor.Win32.HareBot [Ikarus]1
Mal/EncPk-IO [Sophos]1
Mal/EncPk-LO, Mal/FakeAV-AD, Mal/EncPk-LT, Mal/EncPk-JB [Sophos]1
Mal/FakeAV-AA [Sophos]1
Mal/FakeAV-AD, Mal/EncPk-JB [Sophos]1
Mal/FakeAV-AX, Mal/EncPk-MX [Sophos]1
Mal/FakeAV-AX, Mal/EncPk-MX, Mal/WaledPak-B [Sophos]1
Mal/WaledPak-B [Sophos]1
not-a-virus:FraudTool.Win32.Antivirus2010.b [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.SystemSecurity.cc [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.SystemSecurity.ej [Kaspersky Lab]1
Packed.Win32.Krap.r [Kaspersky Lab]1
RogueAntiSpyware.AntiVirus2008 [PC Tools]1
RogueAntiSpyware.Generic [PC Tools]1
SecurityRisk.Downldr [Symantec]1
Troj/FakeAv-NY [Sophos]1
Troj/FakeAV-PX [Sophos]1
TROJ_DLOADER.ZDO [Trend Micro]1
TROJ_FAKEAV.BFE [Trend Micro]1
TROJ_FAKEAV.JEC [Trend Micro]1
Trojan.Dropper [Symantec]1
Trojan.Win32.FakeAV [Ikarus]1
Trojan.Win32.FraudPack [Ikarus]1
Trojan.Win32.FraudPack.mzs [Kaspersky Lab]1
Trojan.Win32.FraudPack.ndy [Kaspersky Lab]1
Trojan.Win32.FraudPack.nju [Kaspersky Lab]1
Trojan.Win32.FraudPack.pbv [Kaspersky Lab]1
Trojan:Win32/Bumat!rts [Microsoft]1
Trojan:Win32/Tibs.IT [Microsoft]1
Trojan-Downloader.Win32.Agent.bqbu [Kaspersky Lab]1
Trojan-Downloader.Win32.Delf.puu [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.dni [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.dzm [Kaspersky Lab]1

FakeAlert-WinwebSecurity.gen [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation143
Ukraine35
Germany1

FakeAlert-WinwebSecurity.gen [McAfee] is known to be created as:
%AppData%\0312332059\0312332059.exe
%AppData%\0939857257\0939857257.exe
%AppData%\2476860355\2476860355.exe
%AppData%\2771607458\2771607458.exe
%AppData%\3562563306\3562563306.exe
%AppData%\4788077256\4788077256.exe
%AppData%\6045089978\6045089978.exe
%AppData%\6086543830\6086543830.exe
%AppData%\6453906564\6453906564.exe
%AppData%\6746652835\6746652835.exe
%AppData%\7388273822\7388273822.exe
%AppData%\7966453237\7966453237.exe
%AppData%\9212010921\9212010921.exe
%CommonAppData%\11160154\11160154.exe
%CommonAppData%\11612814\11612814.exe
%CommonAppData%\11615004\11615004.exe
%CommonAppData%\11615154\11615154.exe
%CommonAppData%\11616094\11616094.exe
%CommonAppData%\11616404\11616404.exe
%CommonAppData%\11628124\11628124.exe
%CommonAppData%\11756874\11756874.exe
%CommonAppData%\11762504\11762504.exe
%CommonAppData%\11771874\11771874.exe
%CommonAppData%\11772654\11772654.exe
%CommonAppData%\11944534\11944534.exe
%CommonAppData%\11949844\11949844.exe
%CommonAppData%\11962034\11962034.exe
%CommonAppData%\11963434\11963434.exe
%CommonAppData%\12019684\12019684.exe
%CommonAppData%\12150314\12150314.exe
%CommonAppData%\12153434\12153434.exe
%CommonAppData%\12154684\12154684.exe
%CommonAppData%\12158434\12158434.exe
%CommonAppData%\12165784\12165784.exe
%CommonAppData%\12174684\12174684.exe
%CommonAppData%\12182344\12182344.exe
%CommonAppData%\12363284\12363284.exe
%CommonAppData%\12884684\12884684.exe
%CommonAppData%\12884844\12884844.exe
%CommonAppData%\12885004\12885004.exe
%CommonAppData%\12885624\12885624.exe
%CommonAppData%\12886714\12886714.exe
%CommonAppData%\12891404\12891404.exe
%CommonAppData%\12892034\12892034.exe
%CommonAppData%\12892184\12892184.exe
%CommonAppData%\12892654\12892654.exe
%CommonAppData%\12893284\12893284.exe
%CommonAppData%\12896714\12896714.exe
%CommonAppData%\12901094\12901094.exe
%CommonAppData%\12901404\12901404.exe
%CommonAppData%\12902184\12902184.exe
%CommonAppData%\12903434\12903434.exe
%CommonAppData%\12903904\12903904.exe
%CommonAppData%\12922344\12922344.exe
%CommonAppData%\12986714\12986714.exe
%CommonAppData%\13086714\13086714.exe
%CommonAppData%\13087344\13087344.exe
%CommonAppData%\13087964\13087964.exe
%CommonAppData%\13088124\13088124.exe
%CommonAppData%\13088284\13088284.exe
%CommonAppData%\13088434\13088434.exe
%CommonAppData%\13088594\13088594.exe
%CommonAppData%\13088904\13088904.exe
%CommonAppData%\13089534\13089534.exe
%CommonAppData%\13089684\13089684.exe
%CommonAppData%\13089844\13089844.exe
%CommonAppData%\13090154\13090154.exe
%CommonAppData%\13090314\13090314.exe
%CommonAppData%\13090624\13090624.exe
%CommonAppData%\13090934\13090934.exe
%CommonAppData%\13091254\13091254.exe
%CommonAppData%\13091404\13091404.exe
%CommonAppData%\13091564\13091564.exe
%CommonAppData%\13091714\13091714.exe
%CommonAppData%\13092034\13092034.exe
%CommonAppData%\13092184\13092184.exe
%CommonAppData%\13092344\13092344.exe
%CommonAppData%\13093594\13093594.exe
%CommonAppData%\13094534\13094534.exe
%CommonAppData%\13094844\13094844.exe
%CommonAppData%\13095004\13095004.exe
%CommonAppData%\13095314\13095314.exe
%CommonAppData%\13099684\13099684.exe
%CommonAppData%\13100624\13100624.exe
%CommonAppData%\13101254\13101254.exe
%CommonAppData%\13102814\13102814.exe
%CommonAppData%\13103284\13103284.exe
%CommonAppData%\13103754\13103754.exe
%CommonAppData%\13106094\13106094.exe
%CommonAppData%\13106404\13106404.exe
%CommonAppData%\13107504\13107504.exe
%CommonAppData%\13108434\13108434.exe
%CommonAppData%\13113594\13113594.exe
%CommonAppData%\13114534\13114534.exe
%CommonAppData%\13122964\13122964.exe
%CommonAppData%\13124684\13124684.exe
%CommonAppData%\13127184\13127184.exe
%CommonAppData%\13128434\13128434.exe
%CommonAppData%\13128754\13128754.exe
%CommonAppData%\13137964\13137964.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.