Threat Search: 

ThreatExpert's Statistics for Mal/FakeAle-C [Sophos]:

Mal/FakeAle-C [Sophos] is also known as:
Threat AliasNumber of Incidents
VirTool:WinNT/Xantvi.gen!A [Microsoft]448
Hacktool.Rootkit [Symantec]440
FakeAlert-C.dr [McAfee]323
Backdoor.Win32.UltimateDefender [Ikarus]284
Backdoor.Win32.UltimateDefender.a [Kaspersky Lab]233
Rootkit.Renos.Gen.11 [PC Tools]215
Backdoor.Win32.UltimateDefender.igv [Kaspersky Lab]195
NTRootKit-AC [McAfee]177
Trojan.Virantix.C [Symantec]107
Adware.Agent.ZO [PC Tools]56
not-a-virus:FraudTool.Win32.UltimateDefender.cm [Ikarus]52
Backdoor.Win32.UltimateDefender.xm [Kaspersky Lab]50
not-a-virus:FraudTool.Win32.UltimateDefender.cm [Kaspersky Lab]50
VirTool:WinNT/Xantvi.A [Microsoft]50
not-a-virus:.FraudTool.Win32.UltimateDefender.cm [Ikarus]44
TROJ_RENOS.AKQ [Trend Micro]8
not-a-virus:.FraudTool [Ikarus]5
TROJ_VIRANTIX.AQ [Trend Micro]4
Win-Trojan/Rootkit.29184.C [AhnLab]4
Backdoor.UltimateDefender [PC Tools]3
Hacktool.Rootkit!sd6 [PC Tools]3
Backdoor.UltimateDefender!sd6 [PC Tools]2
Backdoor.Win32.UltimateDefender.ict [Kaspersky Lab]2
Generic BackDoor!l [McAfee]2
TROJ_VIRANTIX.C [Trend Micro]2
Win-Trojan/Ultimatedefender.20992.B [AhnLab]2
Win-Trojan/Ultimatedefender.28160.AT [AhnLab]2
Win-Trojan/Ultimatedefender.28672.B [AhnLab]2
Backdoor.Win32.UltimateDefender.ifz [Kaspersky Lab]1
Backdoor.Win32.UltimateDefender.igl [Kaspersky Lab]1
Generic PUP.x [McAfee]1
RogueAntiSpyware.XPAntispyware [PC Tools]1
VirTool.WinNT.Xantvi [Ikarus]1
Win-Trojan/Rootkit.27136.B [AhnLab]1
Win-Trojan/Ultimatedefender.27136.O [AhnLab]1
Win-Trojan/Ultimatedefender.27648.AB [AhnLab]1
Win-Trojan/Ultimatedefender.27648.AM [AhnLab]1
Win-Trojan/Ultimatedefender.27648.BP [AhnLab]1
Win-Trojan/Ultimatedefender.27648.BX [AhnLab]1
Win-Trojan/Ultimatedefender.28160.D [AhnLab]1
Win-Trojan/Ultimatedefender.28160.DO [AhnLab]1
Win-Trojan/Ultimatedefender.29184.M [AhnLab]1
Win-Trojan/Ultimatedefender.32768.J [AhnLab]1
Win-Trojan/Xantvi.29184 [AhnLab]1
Win-Trojan/Xantvi.29184.B [AhnLab]1

Mal/FakeAle-C [Sophos] is known to be created as:
%System%\beep.sys
%System%\dllcache\beep.sys
%System%\dllcache\figaro.sys
%Temp%\beep1.sys
%Temp%\beep2.sys
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).