Threat Search: 

ThreatExpert's Statistics for not-a-virus:FraudTool.Win32.SpywareProtect2009 [Ikarus]:

not-a-virus:FraudTool.Win32.SpywareProtect2009 [Ikarus] is also known as:
Threat AliasNumber of Incidents
Mal/EncPk-IB [Sophos]10
Downloader.MisleadApp [Symantec]5
FakeAlert-SpywareProtect [McAfee]3
New Malware.cn [McAfee]3
Trojan.Fakeavalert [Symantec]3
Downloader [Symantec]2
Generic PUP.z!e [McAfee]2
Infostealer.Bancos [Symantec]2
not-a-virus:FraudTool.Win32.SpywareProtect2009.am [Kaspersky Lab]2
not-a-virus:FraudTool.Win32.WinSpywareProtect.mz [Kaspersky Lab]2
PWS:Win32/Zbot.J [Microsoft]2
PWS:Win32/Zbot.PG [Microsoft]2
Trojan:Win32/FakeSpypro [Microsoft]2
TrojanDownloader:Win32/Obitel.gen!A [Microsoft]2
Trojan-Spy.Win32.Zbot.rxd [Kaspersky Lab]2
W32/Koobface.worm.dl [McAfee]2
Win-Trojan/Downloader.290320 [AhnLab]2
Backdoor:Win32/Phdet.gen!A [Microsoft]1
Downloader-BPX [McAfee]1
FakeAlert-CL [McAfee]1
Generic Downloader.x [McAfee]1
Infostealer.Banker.C [Symantec]1
Mal/Behav-321, Mal/WaledPak-A [Sophos]1
Mal/EncPk-CK [Sophos]1
Mal/EncPk-IB, Mal/Basine-C [Sophos]1
Mal/UnkPack-Fam [Sophos]1
not-a-virus:FraudTool.Win32.SpywareProtect2009.bf [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.SpywareProtect2009.bt [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.WinSpywareProtect.mt [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.WinSpywareProtect.ny [Kaspersky Lab]1
Packed.Generic.230 [Symantec]1
PWS:Win32/Zbot.UO [Microsoft]1
Troj/Fakevir-MC [Sophos]1
Trojan Horse [Symantec]1
Trojan.Fakeavalert!sd6 [PC Tools]1
Trojan:Win32/Meredrop [Microsoft]1
Trojan-Downloader.MisleadApp!sd6 [PC Tools]1
Trojan-Downloader.Win32.Small.jnp [Kaspersky Lab]1
Trojan-Dropper.Win32.FrauDrop.aq [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.seg [Kaspersky Lab]1
Vundo [McAfee]1
Vundo!a [McAfee]1
Win-Trojan/FakeSpypro.307216 [AhnLab]1
Win-Trojan/Xema.variant [AhnLab]1

not-a-virus:FraudTool.Win32.SpywareProtect2009 [Ikarus] has the following possible country of origin:
OriginNumber of Incidents
Russian Federation32

not-a-virus:FraudTool.Win32.SpywareProtect2009 [Ikarus] is known to be created as:
%System%\cssrss.exe
%System%\mssrv32.exe
%System%\ntos.exe
%System%\sdra64.exe
%System%\twext.exe
%System%\userinit32.exe
%Windir%\sysguard.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.