Threat Search: 

ThreatExpert's Statistics for Troj/FakeAle-FO [Sophos]:

Troj/FakeAle-FO [Sophos] is also known as:
Threat AliasNumber of Incidents
Infostealer [Symantec]20
Trojan-Mailfinder.Win32.Agent.rj [Kaspersky Lab]20
TROJ_MAILFIND.C [Trend Micro]16
Trojan-Dropper.Agent [PC Tools]16
Generic FakeAlert.a [McAfee]12
Trojan:Win32/Emold.gen!A [Microsoft]12
Backdoor:Win32/Rustock.F [Microsoft]4
Trojan:Win32/Emold.gen!C [Microsoft]4
Trojan-Downloader.Win32.Agent.ablq [Kaspersky Lab]3
Infostealer.Banker.C [Symantec]2
TROJ_AGENT.AIUP [Trend Micro]1
TROJ_DROP.CF [Trend Micro]1
Trojan.Dropper [Symantec]1
Trojan:Win32/Busky.K [Microsoft]1
Trojan-Downloader.Small.GEN [PC Tools]1
TrojanDownloader:Win32/Renos.Q [Microsoft]1
TrojanDropper:Win32/Srizbi.H [Microsoft]1

Troj/FakeAle-FO [Sophos] is known to be created as:
%CommonAppData%\uvafwncj\gvcnglid.exe
%ProgramFiles%\microsoft common\svchost.exe
%Temp%\finder.exe
%Temp%\ziqkj4zjgl.exe
Notes:
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).