Author Topic: Win32/FakeRean and MSRT  (Read 1918 times)

0 Members and 1 Guest are viewing this topic.

August 12, 2009, 04:40:02 am
Read 1918 times

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
http://blogs.technet.com/mmpc/archive/2009/08/11/win32-fakerean-and-msrt.aspx

Quote
This month we added another rogue to the MSRT family list - Win32/FakeRean. Win32/FakeRean is generally very similar to Win32/InternetAntivirus and Win32/FakeXPA, which we continue to see in large numbers each month.
 
Following the fashion, Win32/FakeRean is distributed as several variants, each with a different name and a different "skin". Its interface is actually rendered from HTML stored inside the fake scanner's executable file. Because of this they can often look quite similar. Compare the interfaces for "Home Antivirus 2010" and "PC Antispyware 2010", for example.
Ruining the bad guy's day