Rogue:Win32/FakeYak
Rogue:HTML/FakeXPA
Windows Defender Antivirus detects and removes this threat. See the Win32/FakeXPA description for more information.
Rogue:Win32/FakeRean
Windows Defender Antivirus detects and removes this threat. See the Win32/FakeRean description for more information.
Rogue:HTML/Fakeinit
Windows Defender Antivirus detects and removes this threat. See the Win32/Fakeinit description for more information.
Rogue:JS/FakeAlert
Windows Defender detects and removes this threat.
This threat is detected in a webpage that shows a fake security scanner. It falsely tells you that your PC is infected with viruses and that you need to install other software to disinfect it. The software it offers for install is usually a rogue security software, which doesn't clean your PC and instead tells you that you need to pay for more, nonexistent, cleaning.
See the Rogue security software page for more information.
Rogue:JS/FakeCall.B
Windows Defender detects and removes this threat.
This threat is a webpage that claims your PC is infected with malware. It asks you to phone a number to receive technical support to help remove the malware.
The website is a hoax and cannot find malware on your PC.
You can read more about this type of threat on our rogue security software page.
Rogue:Win32/FakePowav.B
Windows Defender Antivirus detects and removes this threat. See the Win32/FakePowav description for more information.
Rogue:Win32/Sirefef
Windows Defender Antivirus detects and removes this threat. See the Win32/Sirefef description for more information.
Rogue:Win32/Cedel
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products.
Rogue:Win32/FakePowav
Windows Defender Antivirus detects and removes this threat. See the Win32/FakePowav description for more information.
Rogue:MSIL/Zeven
Rogue:JS/Winwebsec
Windows Defender Antivirus detects and removes this threat. See the Win32/Winwebsec description for more information.
Rogue:Win32/Onescan
Windows Defender Antivirus detects and removes this threat. See the Win32/Onescan description for more information.
Rogue:Win32/Therlowindo.A
Microsoft Defender Antivirus detects and removes this threat.
This threat claims to scan for malware and then shows you fake warnings about “malicious programs and viruses”. It then asks you to pay money to remove the fake threats.
Our rogue security software page has more information about this type of threat.
Rogue:Win32/FakePlus
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs, such as Win32/Antivirusxp and Win32/FakeRednefed may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products.
Rogue:Win32/Rudoct
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products.
Rogue:Win32/FakePAV
Windows Defender Antivirus detects and removes this threat. See the Win32/FakePAV description for more information.
Rogue:VBS/Trapwot
Microsoft security software detects and removes this threat.
The threat is a VBScript component of Win32/Trapwot, used to install this rogue. Rogues pretend to be security software and might look and act like Windows Defender, but it's completely fake.
It uses names such as "Spyware Defender" or "System Defender".
It might have been downloaded onto your PC by another malware, or you might have been tricked into downloading it, thinking it was legitimate.
You can read more about this family in the Win32/Trapwot description.
Rogue:Win32/Trapwot
Windows Defender detects and removes this threat.
The threat is a rogue, which means it pretends to be security software. It looks and acts like Windows Defender, but is completely fake.
It uses names such as "Spyware Defender" or "System Defender".
It says it finds malware, viruses, and threats on your PC, and that you need to pay money to fully remove them. The threats do not exist - the rogue is just trying to scare you into paying money for a piece of software that does not work.
The threat might also block access to some websites, change your PC's security settings, and open Internet Explorer windows that load adult content.
It might have been downloaded onto your PC by another malware, or you might have been tricked into downloading it, thinking it was legitimate.
Rogue:JS/FakePAV
Windows Defender Antivirus detects and removes this threat. See the Win32/FakePAV description for more information.