Home / malware

PDF

Rogue:JS/FakePAV

First posted on 16 April 2012.
Source: Microsoft

Aliases :

There are no other names known for Rogue:JS/FakePAV.

Explanation :

Rogue:JS/FakePAV is an HTML component of Rogue:Win32/FakePAV that displays the fake scanner results.


Top

Rogue:JS/FakePAV is an HTML component of Rogue:Win32/FakePAV that displays the fake scanner results.

It displays a message similar to the following:



If the user clicks the OK button, it displays a fake scan of the computer such as the following:



If the user clicks on the "Start Protection" button, it downloads fake security software. The fake security software is detected as Win32/FakePAV.



Analysis by Patrick Estavillo

Last update 16 April 2012

 

TOP