pcdef变winav了

sbbdms

kingmuro

过kv2008

fatezero

The file 'winav.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Fakealert.YU. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

sam.to

to kl

BING126

McAfee miss

haoge868

假冒杀毒软件

sam.to

Hello,

winav.exe_ - not-a-virus:FraudTool.Win32.WinPCDefender.y

New potentially risk software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards, Ilya Tolstikhin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

>

wrq

Category:
Trojan

Description:
This program is dangerous and executes commands from an attacker.

Advice:
Remove this software immediately.

Resources:
containerfile:
C:\Users\wrq\Desktop\winav.rar

file:
C:\Users\wrq\Desktop\winav.rar->winav.exe

filelocalcopy:
C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{DDF95F89-ACE0-42ED-A564-0A63A6C84288}-winav.rar

webfile:
C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{DDF95F89-ACE0-42ED-A564-0A63A6C84288}-winav.rar|http://bbs.kafan.cn/attachment.p ... b1&t=1242143009

webfile:
C:\Users\wrq\Desktop\winav.rar|http://bbs.kafan.cn/attachment.p ... b1&t=1242143009

kingsheet

卡巴
检测到：新威胁 not-a-virus:FraudTool.Win32.WinPCDefender.y        URL: http://bbs.kafan.cn/attachment.p ... 42176627//winav.exe

sam.to

13/5/2009 13:32:03        Detected: not-a-virus:FraudTool.Win32.WinPCDefender.y        C:\Documents and Settings\kato\桌面\winav.rar/winav.exe