Threat Search: 

ThreatExpert's Statistics for Trojan.Win32.FakeRean [Ikarus]:

Trojan.Win32.FakeRean [Ikarus] is also known as:
Threat AliasNumber of Incidents
Trojan:Win32/FakeRean [Microsoft]48
Mal/Generic-A [Sophos]20
FakeAlert-CM [McAfee]14
Mal/EncPk-IF [Sophos]9
not-a-virus:FraudTool.Win32.WinPCDefender.bj [Kaspersky Lab]9
Downloader-BOI [McAfee]7
Trojan.Fakeavalert [Symantec]7
Downloader-BON [McAfee]6
Packed.Generic.233 [Symantec]6
Mal/EncPk-KP, Mal/EncPk-IF, Mal/Basine-C [Sophos]4
not-a-virus:FraudTool.Win32.WinPCDefender.bi [Kaspersky Lab]4
not-a-virus:FraudTool.Win32.WinPCDefender.d [Kaspersky Lab]4
not-a-virus:FraudTool.Win32.XPDeluxeProtector.d [Kaspersky Lab]4
Troj/FakeAv-WL [Sophos]4
TROJ_FAKEALE.SMB [Trend Micro]4
WinDefender [Symantec]4
Win-Trojan/Fakealert.1021440.C [AhnLab]4
Mal/EncPk-IV [Sophos]2
Mal/EncPk-NP, Mal/FakeAV-BT [Sophos]2
Trojan.Fakeavalert!sd6 [PC Tools]2
FakeAlert-DA [McAfee]1
Generic FakeAlert!s [McAfee]1
Generic FakeAlert.d!gen [McAfee]1
Generic.dx [McAfee]1
Mal/EncPk-HH [Sophos]1
Mal/EncPk-IV, Mal/EncPk-IF [Sophos]1
Mal/FakeAV-BT [Sophos]1
Mal/UnkPack-Fam [Sophos]1
not-a-virus:FraudTool.Win32.WinDefender.v [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.WinDefender.x [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.WinPCDefender.bb [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.WinPCDefender.c [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.WinPCDefender.i [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.XPDeluxeProtector.e [Kaspersky Lab]1
Packed.Win32.Krap.t [Kaspersky Lab]1
RogueAntiSpyware.DesktopDefender2010 [PC Tools]1
RogueAntiSpyware.WinDefender [PC Tools]1
Suspicious.Lop [Symantec]1
Troj/FakeAV-OS [Sophos]1
Troj/FakeAV-VR [Sophos]1
Troj/FakeVir-LR [Sophos]1
Trojan Horse [Symantec]1
Trojan.Win32.FraudPack.alip [Kaspersky Lab]1
Trojan.Win32.FraudPack.ppb [Kaspersky Lab]1
Trojan.Win32.FraudPack.qas [Kaspersky Lab]1
Trojan.Win32.FraudPack.tyz [Kaspersky Lab]1
Trojan.Win32.Scar.bdev [Kaspersky Lab]1
Win-Trojan/Fakealert.1022976.B [AhnLab]1
Win-Trojan/FakeAlert.1225728 [AhnLab]1
Win-Trojan/Fakeav.1020928 [AhnLab]1
Win-Trojan/Fraudpack.274432 [AhnLab]1
Win-Trojan/Fraudpack.640197 [AhnLab]1
Win-Trojan/Xema.variant [AhnLab]1

Trojan.Win32.FakeRean [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation38
Ukraine35

Trojan.Win32.FakeRean [Ikarus] is known to be created as:
%AppData%\av.exe
%ProgramFiles%\unvirex\shellext.dll
%System%\home personal antivirus\homeav.exe
%System%\pbavwtvrwmkf.exe
%Temp%\pcdefender\pcdefender.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).