Trojan:Win32/FakeScanti

Trojan:Win32/FakeScanti Description

Trojan:Win32/FakeScanti is a subcategory of rogue anti-virus programs that display similar types of fake warning messages in an attempt to make you spend money on a nonexistent virus-removal feature. Although scamware programs in the Trojan:Win32/FakeScanti group will attempt to appear realistic and believable, Trojan:Win32/FakeScanti applications have no ability to find or delete viruses (or, for that matter, any other type of PC threat). SpywareRemove.com malware researchers recommend that you expel any Trojan:Win32/FakeScanti infection with a real anti-malware application, since Trojan:Win32/FakeScanti infections may also be responsible for severe security issues (such as browser hijacks and blocked security programs), in addition to the many types of fake information that they present.

Trojan:Win32/FakeScanti Scanners: All of the Pizazz and None of the Features

Trojan:Win32/FakeScanti infections look just like normal anti-virus scanners on the outside, but their internal structure is built to create fake alerts and warnings without detecting genuine threats to your PC. The sheer amount of fake warnings, pop-ups and inaccurate messages that Trojan:Win32/FakeScanti can deliver is staggering, and include errors like the ones shown here:

Warning: Spyware Detected
Windows has found spy programs running on your computer!
Click here to update your Windows antivirus software

Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.

Security Warning
There are critical system files on your computer that were modified by malicious software.
It may cause permanent data loss.
Click here to remove malicious software.

Windows Security Center
Serious security vulnerabilities were detected on this computer.

Your privacy and personal data may be unsafe. Do you want to protect your PC?

Warning! Infection found
Unauthorized sending E-MAIL with subject “RE:” to [FAKE EMAIL HERE] was CANCELLED.

Trojan:Win32/FakeScanti may also support its fake warnings by changing your Desktop background or by pretending to scan your PC. The name of the program that Trojan:Win32/FakeScanti displays while Trojan:Win32/FakeScanti provides this fake information can also vary; major branches of Trojan:Win32/FakeScanti scamware programs include names as varied as Your PC Protector, OpenCloud AV, Security Guard 2012, Milestone Antivirus, WireShark Antivirus, Wolfram Antivirus and AV Guard Online. SpywareRemove.com malware experts recommend that you disregard the name that a Trojan:Win32/FakeScanti presents you with, since it, like Trojan:Win32/FakeScanti fake alerts, has no point beyond tricking you into thinking that Trojan:Win32/FakeScanti is a real anti-virus product.

Ousting Trojan:Win32/FakeScanti with Legitimate Anti-Malware Protection for Your PC

Even though Trojan:Win32/FakeScanti’s fake alerts are almost without end, you may also be attacked by additional functions of a Trojan:Win32/FakeScanti infection that will continue to try to persuade you to give money up to Trojan:Win32/FakeScanti’s criminal masterminds. Other symptoms that may make removing Trojan:Win32/FakeScanti particularly-difficult can include:

The automatic startup of a Trojan:Win32/FakeScanti program that starts a fake system scan whenever Windows loads.
A fake Windows Security Center pop-up that only serves in the form of a secondary launcher for Trojan:Win32/FakeScanti programs.
Disabled programs that refuse to launch with unusual warnings. Trojan:Win32/FakeScanti may attempt to deny you access to anti-malware and system maintenance programs, or to all other programs in general.
Random system restarts (AKA reboots).
Web browser hijacks that block your ability to visit PC security websites.

Variants of PC threats within the Trojan:Win32/FakeScanti family can display varying characteristics and may include extra functions that aren’t present in other Trojan:Win32/FakeScanti programs. However, all Trojan:Win32/FakeScanti variants use advanced methods to infect baseline Windows files; due to this, SpywareRemove.com malware analysts recommend that you delete Trojan:Win32/FakeScanti with the best anti-malware program that’s available. If Trojan:Win32/FakeScanti attempts to block your anti-malware application, using Safe Mode or another method to disable Trojan:Win32/FakeScanti from starting in the first place may be mandatory to insure efficient deletion.

The activation code ‘DB038748-B4659586-4A1071AF-32E768CD-36005B1B-F4520642-3000BF2A-04FC910B’ has also been noted to disable some members of the Trojan:Win32/FakeScanti family.

Aliases

Generic Malware [Panda]FakeAlert.SF [AVG]W32/FakeAV.AXNT!tr [Fortinet]Trojan.Fakealert [Ikarus]Trojan.Win32.Generic.52094D3D [Rising]Virus.DOS.RogueAntiSpyware [PCTools]Trojan.Win32.Generic.pak!cobra [Sunbelt]Trojan.Fakealert!IK [a-squared]Trojan/Win32.FraudPack.gen [Antiy-AVL]Win32/SysinternalsAntivirus.D [eTrust-Vet]

More aliases (91)

Trojan:Win32/FakeScanti Automatic Detection Tool (Recommended)

Is your PC infected with Trojan:Win32/FakeScanti? To safely & quickly detect Trojan:Win32/FakeScanti, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Trojan:Win32/FakeScanti What happens if Trojan:Win32/FakeScanti does not let you open SpyHunter or blocks the Internet?

Trojan:Win32/FakeScanti

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	plugie.dll	717
2	%PROGRAMFILES%\ shk_v10.dll	66
3	%PROGRAMFILES%\ adc_w32.dll	33
4	%PROGRAMFILES%\ svchost.exe	12
5	%SystemDrive%\ Documents and Settings\ Guest\ Application Data\ wpp.exe	12
6	%PROGRAMFILES%\ adc_w32.dll	N/A