Attention: We have transitioned to a new AAD or Microsoft Entra ID from the week of May 20, 2024. In case your tenant requires admin consent, please refer to this document located at Overview of user and admin consent - Microsoft Entra ID | Microsoft Learn and grant access to App ID: 6ba09155-cb24-475b-b24f-b4e28fc74365 with graph permissions for Directory.Read.All and User.Read for continued access. While the app may appear unverified, you can confirm its legitimacy by verifying the App ID provided.
8 entries found.
Rogue:Win32/FakeXPA
Updated on Aug 17, 2010
Windows Defender Antivirus detects and removes this threat. See the Win32/FakeXPA description for more information.
Alert level:
severe
Trojan:Win32/FakeXPA
Updated on Sep 06, 2010
This threat has been renamed to Rogue:Win32/FakeXPA.
Alert level:
severe
AVGAntivirus2011
Updated on Jan 30, 2011
'AVG Antivirus 2011' is a variant of Win32/FakeXPA - a family of programs that claims to scan for malware and displays fake warnings of malicious programs and viruses. They then inform the user that they need to pay money to register the software to remove these non-existent threats. Some members of the Win32/FakeXPA family might also download additional malware and have been observed in the wild downloading variants of Win32/Alureon.
Special Note:
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs, such as Trojan:Win32/Antivirusxp and Program:Win32/FakeRednefed may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products. These products may represent themselves as "Antivirus XP", "AntivirusXP 2008", "WinDefender 2008", "XP Antivirus", or similar.
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs, such as Trojan:Win32/Antivirusxp and Program:Win32/FakeRednefed may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products. These products may represent themselves as "Antivirus XP", "AntivirusXP 2008", "WinDefender 2008", "XP Antivirus", or similar.
Use Microsoft Windows Defender, Microsoft Security Essentials, the Microsoft Safety Scanner, or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.
Alert level:
low
E-SetAntivirus2011
Updated on Mar 16, 2011
'E-Set Antivirus 2011' is a variant of Win32/FakeXPA - a family of programs that claims to scan for malware and displays fake warnings of "malicious programs and viruses". They then inform the user that they need to pay money to register the software in order to remove these non-existent threats. Some members of the Win32/FakeXPA family may also download additional malware and have been observed in the wild downloading variants of Win32/Alureon.
Special Note:
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs, such as Trojan:Win32/Antivirusxp and Program:Win32/FakeRednefed may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products. These products may represent themselves as "Antivirus XP", "AntivirusXP 2008", "WinDefender 2008", "XP Antivirus", or similar.
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs, such as Trojan:Win32/Antivirusxp and Program:Win32/FakeRednefed may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products. These products may represent themselves as "Antivirus XP", "AntivirusXP 2008", "WinDefender 2008", "XP Antivirus", or similar.
Use Microsoft Windows Defender, Microsoft Security Essentials, the Microsoft Safety Scanner, or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.
Alert level:
low
FakeBitdefender2011
Updated on Apr 21, 2011
Fake 'BitDefender 2011' is a variant of Win32/FakeXPA - a family of programs that claims to scan for malware and displays fake warnings of "malicious programs and viruses". They then inform the user that they need to pay money to register the software in order to remove these non-existent threats. Some members of the Win32/FakeXPA family may also download additional malware and have been observed in the wild downloading variants of Win32/Alureon.
This variant of Win32/FakeXPA is branded to appear similar to a valid security product also titled BitDefender in an effort to trick users into purchasing it.
Special Note:
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs, such as Trojan:Win32/Antivirusxp and Program:Win32/FakeRednefed may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products. These products may represent themselves as "Antivirus XP", "AntivirusXP 2008", "WinDefender 2008", "XP Antivirus", or similar.
Reports of Rogue Antivirus programs have been more prevalent as of late. These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software. Some of these programs, such as Trojan:Win32/Antivirusxp and Program:Win32/FakeRednefed may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products. These products may represent themselves as "Antivirus XP", "AntivirusXP 2008", "WinDefender 2008", "XP Antivirus", or similar.
Use Microsoft Windows Defender, Microsoft Security Essentials, the Microsoft Safety Scanner, or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.
Alert level:
low