Threat Search: 

ThreatExpert's Statistics for Mal/EncPk-FX [Sophos]:

Mal/EncPk-FX [Sophos] is also known as:
Threat AliasNumber of Incidents
Packed.Generic.187 [Symantec]25
Trojan:Win32/FakeXPA [Microsoft]20
AntispywareProXP [Symantec]6
Generic Downloader.x [McAfee]6
Packed.Win32.Katusha.e [Kaspersky Lab]5
Trojan.Win32.FakeAV [Ikarus]5
Downloader.MisleadApp [Symantec]4
Generic PWS.y [McAfee]4
Generic.Win32.Malware [Ikarus]4
not-a-virus:FraudTool.Win32.MSAntispyware2009.g [Kaspersky Lab]4
PWCrack-Winspy [McAfee]4
Virus.Trojan.MSAntiSpyware2009rel [Ikarus]4
Downloader [Symantec]3
Generic.Win32.Malware.WinSpywareProtect [Ikarus]3
Trojan Horse [Symantec]3
Trojan.Win32.FraudPack [Ikarus]3
Virus.Win32.Ups [Ikarus]3
Backdoor.Trojan [Symantec]2
Downloader-BLO [McAfee]2
FakeAlert-AB [McAfee]2
Packed.Win32.Katusha [Ikarus]2
Packed.Win32.Katusha.a [Kaspersky Lab]2
Packed.Win32.Krap.j [Kaspersky Lab]2
PersonalAV [McAfee]2
Trojan.FakeAV!gen5 [Symantec]2
Trojan.Generic [PC Tools]2
Trojan:Win32/Vundo.gen!AN [Microsoft]2
Trojan-Downloader.Win32.FakeReprox [Ikarus]2
AntiVirus2009 [Symantec]1
FakeAlert-CN.gen.a [McAfee]1
FakeAlert-KN.gen [McAfee]1
Gen.Trojan [Ikarus]1
Generic Dropper.dz [McAfee]1
Generic FakeAlert!ci [McAfee]1
Generic FakeAlert!ck [McAfee]1
Generic FakeAlert!eh [McAfee]1
Generic FakeAlert.c [McAfee]1
Generic PUP.z [McAfee]1
Malware.Virut [PC Tools]1
not-a-virus:FraudTool.Win32.AntiSpyWarePro.h [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.AntiVirusPro.es [Kaspersky Lab]1
SecurityRisk.TotalSecurity [PC Tools]1
TotalSecurity [Symantec]1
Trojan.Fakealert [Ikarus]1
Trojan.FakeAV [Symantec]1
Trojan.Fakeavalert [Symantec]1
Trojan.Win32.Agent.biix [Kaspersky Lab]1
Trojan.Win32.FraudPack.ajkv [Kaspersky Lab]1
Trojan.Win32.FraudPack.akwo [Kaspersky Lab]1
Trojan.Win32.FraudPack.alit [Kaspersky Lab]1
Trojan.Win32.FraudPack.gyq [Kaspersky Lab]1
Trojan.Win32.FraudPack.hah [Kaspersky Lab]1
Trojan.Win32.FraudPack.hcy [Kaspersky Lab]1
Trojan.Win32.FraudPack.htb [Kaspersky Lab]1
Trojan.Win32.FraudPack.hyk [Kaspersky Lab]1
Trojan.Win32.FraudPack.tln [Kaspersky Lab]1
Trojan.Win32.FraudPack.xgz [Kaspersky Lab]1
Trojan.Win32.FraudPack.ykj [Kaspersky Lab]1
Trojan.Win32.FraudPack.ykk [Kaspersky Lab]1
Trojan.Win32.FraudPack.ypc [Kaspersky Lab]1
Trojan.Win32.FraudPack.yze [Kaspersky Lab]1
Trojan.Win32.Pakes [Ikarus]1
Trojan.Win32.Pakes.mom [Kaspersky Lab]1
Trojan:Win32/WinSpywareProtect [Microsoft]1
Trojan-Downloader.MisleadApp!sd6 [PC Tools]1
Trojan-Downloader.Win32.Agent.awxc [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad [Ikarus]1
Trojan-Downloader.Win32.FraudLoad.cvo [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.fjm [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.vevk [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.wygq [Kaspersky Lab]1
Trojan-PWS.Win32.Gamec [Ikarus]1
Virus.Win32.Trojan [Ikarus]1
W32.Virut.CF [Symantec]1
Win32.SuspectCrc [Ikarus]1
Win-Trojan/Agent.86027.D [AhnLab]1
Win-Trojan/Fraudload.81931 [AhnLab]1

Mal/EncPk-FX [Sophos] has the following possible countries of origin:
OriginNumber of Incidents
China1
Taiwan1

Mal/EncPk-FX [Sophos] is known to be created as:
%CommonAppData%\26974432\26974432.exe
%CommonAppData%\crucialsoft ltd\ms antispyware 2009\msas2009.exe
%ProgramFiles%\psecurity\psecurity.exe
%Temp%\_a00f3f444.exe
%Temp%\_a00f46a4f.exe
%Temp%\_a00f46b87.exe
%Temp%\_a00f4b86f.exe
%Temp%\_a00f4b88e.exe
%Temp%\_a00f4b8bd.exe
%Temp%\alpha.exe
%Temp%\psecurity.exe
Notes:
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).