Home Malware Programs Trojans Hoax.Renos

Hoax.Renos

Posted: February 24, 2007

Threat Metric

Ranking: 16,596
Threat Level: 4/10
Infected PCs: 145
First Seen: July 24, 2009
Last Seen: September 6, 2023
OS(es) Affected: Windows

Hoax.Renos is a Trojan that gets into your system through ActiveX driveby downloads, browser security exploits, and other unethical mechanisms. Once installed on your computer, Hoax.Renos will persistently display fake warning and error messages in order to trick you into buying fake applications. Some variants of this Trojan are known to be extremely difficult to manually remove.

Aliases

Downloader.MisleadApp [Symantec]Trojan-Downloader.Win32.CodecPack (v) [Sunbelt]Mal/EncPk-HW [Sophos]Trojan.Agent.cdw.C [McAfee-GW-Edition]Generic Dropper.cx [McAfee]W32/Dropper.CX!tr [Fortinet]Win32.GenericDropper [eSafe]Trojan.Renos.NIQ [BitDefender]Dropper.Generic.AQBP [AVG]TR/Agent.cdw.C [AntiVir]TROJ_FAKEAVALE.H [TrendMicro]Trojan.Fakeavalert [Symantec]Trojan.FakeAlert [Sunbelt]Mal/FakeAlert-A [Sophos]Fraudulent Security Program [Prevx1]
More aliases (38)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



rtmipr.dll File name: rtmipr.dll
Size: 13.31 KB (13312 bytes)
MD5: 5590b0d943592f7046664f86cbbbe369
Detection count: 60
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
autorun.exe, Templx10049.exe, vs10049[1].exe, findfast.exe, shell.exe, printer.exe, spoolvs.exe File name: autorun.exe, Templx10049.exe, vs10049[1].exe, findfast.exe, shell.exe, printer.exe, spoolvs.exe
Size: 9.72 KB (9728 bytes)
MD5: 84e8d514487562dcc6b36a8e551b2d19
Detection count: 55
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
axuilelx.exe File name: axuilelx.exe
Size: 77.82 KB (77824 bytes)
MD5: f99db1c2b5126d347066cf5ba1d9bfff
Detection count: 53
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
kxfcedlq.dll File name: kxfcedlq.dll
Size: 86.01 KB (86016 bytes)
MD5: 3b6330ba64de6dcab23e1cf936f0222f
Detection count: 45
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
autorun.exe File name: autorun.exe
Size: 12.28 KB (12288 bytes)
MD5: 8c194d5a3a785c6a1e1d3d810e2a3d1b
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
akjsfmea.dll File name: akjsfmea.dll
Size: 73.72 KB (73728 bytes)
MD5: 1a580f5d4369277c1db23a9d52c4e3cb
Detection count: 41
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
akhwjhpi.exe File name: akhwjhpi.exe
Size: 77.82 KB (77824 bytes)
MD5: 8d2d474f887e617238ab0ef30f7d0743
Detection count: 36
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
tempo-139421.tmp File name: tempo-139421.tmp
Size: 118.27 KB (118276 bytes)
MD5: 46cd680d6d08b4369164fcd6ff1ab20d
Detection count: 14
File type: Temporary File
Mime Type: unknown/tmp
Group: Malware file
Last Updated: December 11, 2009
spoolvs.exe File name: spoolvs.exe
Size: 9.72 KB (9728 bytes)
MD5: 70bec45867c8c26154aab921d40fd112
Detection count: 13
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

Registry Modifications

The following newly produced Registry Values are:

File name without pathprinter.exespoolvs.exeRun keysPrinter

Related Posts

Loading...