Threat Search: 

ThreatExpert's Statistics for Trojan.Win32.FakeScanti [Ikarus]:

Trojan.Win32.FakeScanti [Ikarus] is also known as:
Threat AliasNumber of Incidents
Trojan.Fakeavalert [Symantec]586
Trojan:Win32/FakeScanti [Microsoft]475
Troj/FakeVir-NY [Sophos]353
Mal/Generic-A [Sophos]338
Win-Trojan/FakeAlert.176128.E [AhnLab]288
Generic FakeAlert!bo [McAfee]252
WindowsAntivirusPro [Symantec]222
Generic FakeAlert!ci [McAfee]192
RogueAntiSpyware.AntiVirusPro [PC Tools]183
Win-Trojan/Xema.variant [AhnLab]145
Trojan.Win32.FraudPack.tcl [Kaspersky Lab]144
FakeAlert-GA.dll [McAfee]105
not-a-virus:FraudTool.Win32.AntiVirusPro.ng [Kaspersky Lab]61
Trojan.Win32.BHO.xxc [Kaspersky Lab]40
Win-Trojan/FakeAV.345088 [AhnLab]36
TROJ_FAKEAV.DAS [Trend Micro]23
Win-Trojan/Bho.827392.C [AhnLab]23
Generic FakeAlert.b [McAfee]20
Mal/FakeVir-G [Sophos]18
Win-Trojan/FakeAlert.827392 [AhnLab]18
Trojan.Win32.FakeAV [Ikarus]16
Troj/FakeAV-XB [Sophos]15
FakeAlert-GA [McAfee]10
Troj/FakeAle-QC [Sophos]6
Trojan.Win32.FraudPack.ulp [Kaspersky Lab]6
AntiVirus2009 [Symantec]4
Generic FakeAlert!bu [McAfee]4
not-a-virus:FraudTool.Win32.Antivirus2008pro.bq [Kaspersky Lab]4
not-a-virus:FraudTool.Win32.WinAntiVirus.lc [Kaspersky Lab]4
not-a-virus:FraudTool.Win32.WinAntiVirus.lq [Kaspersky Lab]4
not-a-virus:FraudTool.Win32.XPAntivirus.fjr [Kaspersky Lab]4
Troj/FakeAv-XM [Sophos]4
Win-Trojan/FakeAv.390144 [AhnLab]4
Win-Trojan/Fakescanti.65536 [AhnLab]4
not-a-virus:FraudTool.Win32.AntiVirusPro.ns [Kaspersky Lab]3
Trojan.Fakealert [Ikarus]3
Trojan.Vundo [Symantec]3
Dropper/FakeAv.2510233 [AhnLab]2
Mal/FakeAV-BG [Sophos]2
not-a-virus:FraudTool.Win32.AntiVirusPro.nb [Kaspersky Lab]2
not-a-virus:FraudTool.Win32.AntiVirusPro.nc [Kaspersky Lab]2
not-a-virus:FraudTool.Win32.AntiVirusPro.nf [Kaspersky Lab]2
Win-Trojan/Fakescanti.827392 [AhnLab]2
AntiVirus2008 [Symantec]1
FakeAlert-AB [McAfee]1
Generic PUP.x!x [McAfee]1
not-a-virus:FraudTool.Win32.WinAntiVirus.jx [Kaspersky Lab]1
Virus.Win32.Virut.ce [Kaspersky Lab]1
Virus:Win32/Virut.BM [Microsoft]1
W32.Virut.CF [Symantec]1
W32/Virut.n.gen [McAfee]1
Win32/Virut.F [AhnLab]1

Trojan.Win32.FakeScanti [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation63
Ukraine62

Trojan.Win32.FakeScanti [Ikarus] is known to be created as:
%ProgramFiles%\adc32.dll
%System%\dddesot.dll
%System%\desot.exe
%System%\desote.exe
%Temp%\dbsinit.exe
%Temp%\dddesot.dll
%Temp%\desot.exe
%Temp%\svchast.exe
%Windir%\svchast.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.