Threat Search: 

ThreatExpert's Statistics for Mal/FakeAV-AH [Sophos]:

Mal/FakeAV-AH [Sophos] is also known as:
Threat AliasNumber of Incidents
Trojan-Downloader.Win32.FraudLoad [Ikarus]38
XPAntivirus [Symantec]28
FakeAlert-BY [McAfee]22
Trojan.Fakeavalert [Symantec]17
Downloader [Symantec]13
Packed.Win32.Katusha.a [Kaspersky Lab]12
TrojanDownloader:Win32/Renos.HL [Microsoft]8
Trojan-Dropper [Ikarus]8
Packed.Generic.187 [Symantec]7
Trojan:Win32/WinSpywareProtect [Microsoft]6
Generic Downloader.x [McAfee]5
Downloader.MisleadApp [Symantec]4
Packed.Generic.177 [Symantec]4
Win-Trojan/Downloader.76811 [AhnLab]4
Downloader-BLO [McAfee]3
FakeAlert-av360 [McAfee]3
Trojan-Downloader.Win32.Renos [Ikarus]3
AntispywareProXP [Symantec]2
AntiVirus2009 [Symantec]1
Downloader-BLO.dam [McAfee]1
FakeAlert-BV [McAfee]1
not-a-virus:FraudTool.Win32.MSAntispyware2009.am [Kaspersky Lab]1
Packed.Win32.Katusha [Ikarus]1
Packed.Win32.Katusha.b [Kaspersky Lab]1
PCAntiSpyware [Symantec]1
TROJ_FRAUDLO.CF [Trend Micro]1
Trojan.Win32.FraudPack.lee [Kaspersky Lab]1
Trojan.Win32.WinSpywareProtect [Ikarus]1
Trojan-Downloader.MisleadApp!sd6 [PC Tools]1
Trojan-Downloader.Win32.FraudLoad.dzd [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.vmyo [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.vnim [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.vnmy [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.voem [Kaspersky Lab]1
Win-Trojan/Downloader.72203 [AhnLab]1
Win-Trojan/Fraudload.71179 [AhnLab]1
Win-Trojan/Fraudload.77323 [AhnLab]1
Win-Trojan/Fraudpack.77835 [AhnLab]1
Win-Trojan/Katusha.70667.D [AhnLab]1
Win-Trojan/Katusha.73227.D [AhnLab]1
Win-Trojan/Xema.variant [AhnLab]1

Mal/FakeAV-AH [Sophos] is known to be created as:
%CommonAppData%\crucialsoft ltd\ms antispyware 2009\msas2009.exe
%ProgramFiles%\cmvideoplugin\setup.exe
Notes:
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.