TrojanDownloader:Win32/Cutwail.gen!C is a Trojan that downloads and executes arbitrary files and uses advanced stealth techniques in order to hide its presence on the affected system.

TrojanDownloader:Win32/Zlob.gen!BL is a generic detection for a trojan downloader member of the Zlob family. It installs a BHO (Browser Helper Object) in the system. It may also modify the default browser search engine to redirect searches to a certain web site.

Trojan:Win32/Zlob.J is a generic detection for a component of the greater Win32/Zlob malware family.
Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software).

 

The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.

Windows Defender Antivirus detects and removes this threat. See the Win32/FakePowav description for more information.

Worm:Win32/Delf.CV is a worm that spreads via removable and network drives.

Windows Defender Antivirus detects and removes this threat. See the Win32/FakeScanti description for more information.

Win32/FakeScanti is a rogue that claims to scan for malware and displays fake warnings of "malicious programs and viruses". It tells you that you need to pay to register this fake program and remove the non-existent threats. Win32/FakeScanti variants have been observed to use names like:

• AKM Antivirus Pro
• AV Guard Online
• BlueFlare Antivirus
• Guard Online
• Milestone Antivirus
• Open Cloud AV
• OpenCloud Antivirus
• Security Guard 2012
• Sysinternals Antivirus
• Windows Antivirus Pro
• Windows Police Pro
• XJR Antivirus
• Your PC Protector

Win32/FakePowav is a rogue that pretends to scan for malware. It then shows you fake warnings of "malicious programs and viruses". It then inform the user that they need to pay money in order to remove these non-existent threats.

More information about these types of threats is available in our Rogue page.