Published Aug 17, 2010|Updated Sep 15, 2017

Win32/FakeScanti

Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: OpenCloud Antivirus (other) OpenCloud Security (other) FakeAlert-GA.dll (McAfee) Win32/WindowsAntivirusPro.F (CA) Adware/WindowsAntivirusPro (Panda) Trojan.Fakeavalert (Symantec) AKM Antivirus 2010 (other) BlueFlare Antivirus (other) Milestone Antivirus (other) PC Protector (other) Sysinternals Antivirus (other) Trojan:Win32/FakeScanti (other) TrojanDownloader:Win32/FakeScanti (other) Windows Antivirus Pro (other) Windows Police Pro (other) Wireshark Antivirus (other) Wolfram Antivirus (other) Your PC Protector (other) Open Cloud AV (other) Security Guard 2012 (other) AV Guard Online (other) Guard Online (other) AV Protection Online (other) Cloud Protection (other) System Security 2011 (other) System Security 2012 (other) AV Security 2012 (other) AV Protection 2011 (other) Cloud AV 2012 (other)

Win32/FakeScanti is a rogue that claims to scan for malware and displays fake warnings of "malicious programs and viruses". It tells you that you need to pay to register this fake program and remove the non-existent threats. Win32/FakeScanti variants have been observed to use names like:

  • AKM Antivirus Pro
  • AV Guard Online
  • BlueFlare Antivirus
  • Guard Online
  • Milestone Antivirus
  • Open Cloud AV
  • OpenCloud Antivirus
  • Security Guard 2012
  • Sysinternals Antivirus
  • Windows Antivirus Pro
  • Windows Police Pro
  • XJR Antivirus
  • Your PC Protector