Threat Search: 

ThreatExpert's Statistics for RealAV [Symantec]:

RealAV [Symantec] is also known as:
Threat AliasNumber of Incidents
Mal/FakeVirPk-A, Mal/TibsPk-A [Sophos]803
Trojan-Downloader.Win32.FraudLoad.vkwp [Kaspersky Lab]390
Generic.dx [McAfee]290
Trojan.Fakeavalert [Symantec]290
Trojan-Downloader.FraudLoad!sd6 [PC Tools]290
Trojan-Downloader.Win32.FraudLoad [Ikarus]272
Mal/BHO-XPP, Mal/FakeVirPk-A, Mal/TibsPk-A [Sophos]50
Win-Trojan/Fraudload.15360.G [AhnLab]40
Trojan:Win32/Tibs.gen!lds [Microsoft]20
TrojanDownloader:Win32/Renos.GN [Microsoft]13
Generic PUP.x [McAfee]9
not-a-virus:FraudTool.Win32.Agent.jc [Kaspersky Lab]9
Troj/FakeAV-KT [Sophos]9
Trojan.Win32.Tibs [Ikarus]9
Trojan-Downloader.Win32.FraudLoad.dmm [Kaspersky Lab]9
Generic Downloader.x [McAfee]8
Mal/FakeVirPk-A [Sophos]7
not-a-virus:FraudTool.Win32.XpPoliceAntivirus.a [Kaspersky Lab]5
Trojan.Win32.FakeXPA [Ikarus]4
Trojan:Win32/FakeXPA [Microsoft]4
Trojan:Win32/FakeRean [Microsoft]3
Trojan-Downloader.Win32.Renos [Ikarus]3
Win-Trojan/Fakeav.20480.B [AhnLab]3
Mal/Generic-A [Sophos]2
FakeAlert-AntiVirusXP [McAfee]1
Mal/EncPk-HJ, Mal/EncPk-HJ [Sophos]1
not-a-virus:FraudTool.Win32.Agent.hv [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.AntivirusXPPro.ao [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.dls [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.vixu [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.vkbk [Kaspersky Lab]1
Win-Trojan/Adspy.802816 [AhnLab]1
Win-Trojan/Fakeav.72710 [AhnLab]1
Win-Trojan/Fraudload.72704.C [AhnLab]1

RealAV [Symantec] has the following possible countries of origin:
OriginNumber of Incidents
Ukraine8
Russian Federation5

RealAV [Symantec] is known to be created as:
%ProgramFiles%\antivirusxp\antivirusxp.exe
%ProgramFiles%\xppoliceantivirus\xppolice.exe
%System%\avcorefn.dll
%System%\core.dll
%System%\xppolice.exe
%Temp%\setupdatdownload.com\xppolice.exe
%Windir%\iehost.dll
%Windir%\iehost32.dll
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.