Skip to main content
Microsoft Security Intelligence
Published Dec 13, 2007 | Updated Sep 15, 2017


Detected by Microsoft Defender Antivirus

Aliases: Win32/TrojanDownloader.Agent.NQQ (ESET) not-virus:Hoax.Win32.Renos.he (Kaspersky) BraveSentry (McAfee) Program:Win32/SpySheriff (Microsoft) W32/Spywad.EGU (Norman) Troj/Spywad-AS (Sophos) SecurityRisk.Downldr (Symantec)


Renos is a family of Trojans that displays messages reporting that the user's current security software is malfunctioning and that new security software should be downloaded. The message is false and misleading, and it is intended to encourage users into downloading and/or purchasing third-party software.
This is a minor variant of Win32/Renos.gen!I. This variant may download unwanted programs identified as Program:Win32/SpySheriff, also known as 'MalwareAlarm'.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see
Follow us