Author Topic: Win32/FakeRean and MSRT  (Read 2558 times)

0 Members and 1 Guest are viewing this topic.

August 12, 2009, 04:40:02 am
Read 2558 times


  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335

This month we added another rogue to the MSRT family list - Win32/FakeRean. Win32/FakeRean is generally very similar to Win32/InternetAntivirus and Win32/FakeXPA, which we continue to see in large numbers each month.
Following the fashion, Win32/FakeRean is distributed as several variants, each with a different name and a different "skin". Its interface is actually rendered from HTML stored inside the fake scanner's executable file. Because of this they can often look quite similar. Compare the interfaces for "Home Antivirus 2010" and "PC Antispyware 2010", for example.
Ruining the bad guy's day