Skip to main content
Skip to main content
Microsoft Security Intelligence
818 entries found. Displaying page 14 of 41.
Updated on Mar 06, 2009
Win32/FakeScanti is a family of trojans that claim to scan for malware and display fake warnings of ā€œmalicious programs and virusesā€. They then inform the user that they need to pay money to register the software in order to remove these non-existent threats. Win32/FakeScanti variants have been observed to use names such as ā€œWindows Antivirus Pro.ā€
Ā 
Special Note:
Reports of Rogue Antivirus programs have been more prevalent as of late.Ā  These are programs that generate misleading alerts and false detections in order to convince users to purchaseĀ illegitimate security software.Ā Ā Some of theseĀ programs may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products.Ā 
Ā 
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
Ā 
Ā 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Alert level: severe
Updated on Sep 07, 2009
Trojan:Win32/Airostor.B is a trojan that sends the infected system's MAC address to a remote Web site. It also adds a link to the desktop, Start Menu, and Quick Launch bar of all users.
Alert level: severe
Updated on Oct 25, 2009
Trojan:Win32/Alureon.CO is a trojan that downloads and executes arbitrary files. Some malwareĀ detected with this name may also be able to spread to removable drives.
Ā 
For more information on Win32/Alureon, please see our family description elsewhere in this encyclopedia.
Alert level: severe
Updated on Nov 05, 2009
TrojanDownloader:Win32/Nubjub.A is a trojan downloader that stops the Windows Security Center service (wscsvc) and may download other malware from a remote website.
Alert level: severe
Updated on Dec 01, 2009
Worm:Win32/Mofksys.A is a worm that may spread viaĀ network shares, removable drives and e-mail. The worm changes Windows settings and could send collected sensitive data to an attacker via SMTP.
Alert level: severe
Updated on Feb 22, 2012

Trojan:AndroidOS/Plankton.gen!A is a trojan that affects mobile devices running the Android operating system. It may arrive as part of repackaged Android apps and downloaded from third-party Android app markets. It changes the device's settings, and steals information stored in the device.

Alert level: severe
Updated on Jan 21, 2013

TrojanDownloader:Win32/Kepma.B is a trojan that downloads unwanted software. It may also send information about your computer to a remote server.

Alert level: severe
Updated on Mar 25, 2013
TrojanDownloader:Win32/DynaDesk.A is a trojan that silently downloads and installs other programs without consent. This could include the installation of additional malware or malware components to an affected computer.
Alert level: severe
Updated on Mar 25, 2014

Windows Defender detects and removes this threat.

This threat can make changes to your web browser start page. It can also install other malware, including Trojan:Win32/Wysotot.D.

It is usually installed on your PC by software bundlers that advertise free software or games.

Alert level: severe
Updated on Mar 11, 2015

This application was stopped from running on your network because it has a poor reputation. This application can affect the quality of your computing experience. For example, some potentially unwanted applications can:

  • Install additional bundled software
  • Modify your homepage
  • Modify your search provider
  • Perform other actions that you might not have intended

These applications are most commonly software bundlers or installers for applications such as toolbars, adware, or system optimizers.

If you were trying to install an application, you might have downloaded it from a source other than the official product's website.

We usually see this application installed on PCs in the following countries. This list is sorted according to prevalence:

  • United States
  • Russia
  • Brazil
  • France
  • Spain

This detection is part of our extended Potentially Unwanted Application protection feature.

Alert level: severe
Updated on Apr 01, 2009
Trojan:Win32/Wintrim.G is a component of the greater Win32/Wintrim family that is used for downloading and installing additional Wintrim components. Win32/Wintrim is a family of trojans that display pop-up advertisements depending on the user's keywords and browsing history. Its variantsĀ can also monitor the user's activities, download applications, and send system information back to a remote server.
Alert level: severe
Updated on Jun 20, 2006

Adware:Win32/Hotbar is an adware program that displays advertisements to as you browse the web.

It also installs other adware components related to Win32/ClickPotato and Win32/ShopperReports. Hotbar also installs "skins" that make Internet Explorer, Outlook, and Outlook Express look different.

It may be installed on your computer alongside other software, or you may have downloaded it from a website that mimics another one, such as those seen below:

PinBall Audacity website

Legitimate Audacity website

   

PinBall ARES website

Legitimate ARES website

Alert level: high
Updated on Jun 20, 2006

This program was detected by definitions prior to 1.175.240.0 as it violated the guidelines by which Microsoft identified unwanted software. Based on analysis using current guidelines, the program does not have unwanted behaviors.

Alert level: moderate
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe