Home Malware Programs Trojans Hoax.Renos

Hoax.Renos

Posted: February 24, 2007

Threat Metric

Threat Level: 4/10
Infected PCs: 133
First Seen: July 24, 2009
Last Seen: August 3, 2021
OS(es) Affected: Windows

Hoax.Renos is a Trojan that gets into your system through ActiveX driveby downloads, browser security exploits, and other unethical mechanisms. Once installed on your computer, Hoax.Renos will persistently display fake warning and error messages in order to trick you into buying fake applications. Some variants of this Trojan are known to be extremely difficult to manually remove.

Aliases

Downloader.MisleadApp [Symantec]Trojan-Downloader.Win32.CodecPack (v) [Sunbelt]Mal/EncPk-HW [Sophos]Trojan.Agent.cdw.C [McAfee-GW-Edition]Generic Dropper.cx [McAfee]W32/Dropper.CX!tr [Fortinet]Win32.GenericDropper [eSafe]Trojan.Renos.NIQ [BitDefender]Dropper.Generic.AQBP [AVG]TR/Agent.cdw.C [AntiVir]TROJ_FAKEAVALE.H [TrendMicro]Trojan.Fakeavalert [Symantec]Trojan.FakeAlert [Sunbelt]Mal/FakeAlert-A [Sophos]Fraudulent Security Program [Prevx1]
More aliases (38)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Hoax.Renos may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



rtmipr.dll File name: rtmipr.dll
Size: 13.31 KB (13312 bytes)
MD5: 5590b0d943592f7046664f86cbbbe369
Detection count: 60
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
autorun.exe, Templx10049.exe, vs10049[1].exe, findfast.exe, shell.exe, printer.exe, spoolvs.exe File name: autorun.exe, Templx10049.exe, vs10049[1].exe, findfast.exe, shell.exe, printer.exe, spoolvs.exe
Size: 9.72 KB (9728 bytes)
MD5: 84e8d514487562dcc6b36a8e551b2d19
Detection count: 55
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
axuilelx.exe File name: axuilelx.exe
Size: 77.82 KB (77824 bytes)
MD5: f99db1c2b5126d347066cf5ba1d9bfff
Detection count: 53
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
kxfcedlq.dll File name: kxfcedlq.dll
Size: 86.01 KB (86016 bytes)
MD5: 3b6330ba64de6dcab23e1cf936f0222f
Detection count: 45
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
autorun.exe File name: autorun.exe
Size: 12.28 KB (12288 bytes)
MD5: 8c194d5a3a785c6a1e1d3d810e2a3d1b
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
akjsfmea.dll File name: akjsfmea.dll
Size: 73.72 KB (73728 bytes)
MD5: 1a580f5d4369277c1db23a9d52c4e3cb
Detection count: 41
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
akhwjhpi.exe File name: akhwjhpi.exe
Size: 77.82 KB (77824 bytes)
MD5: 8d2d474f887e617238ab0ef30f7d0743
Detection count: 36
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
tempo-139421.tmp File name: tempo-139421.tmp
Size: 118.27 KB (118276 bytes)
MD5: 46cd680d6d08b4369164fcd6ff1ab20d
Detection count: 14
File type: Temporary File
Mime Type: unknown/tmp
Group: Malware file
Last Updated: December 11, 2009
spoolvs.exe File name: spoolvs.exe
Size: 9.72 KB (9728 bytes)
MD5: 70bec45867c8c26154aab921d40fd112
Detection count: 13
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

Registry Modifications

The following newly produced Registry Values are:

File name without pathprinter.exespoolvs.exeRun keysPrinter

Related Posts