Fake-Alert software, also called fake AV or rogue anti-virus software, is malware that masquerades as a legitimate security application. These threats employ social engineering tactics to trick users into purchasing and installing malicious products. Once installed, a system scan will run that subsequently claims that the machine is infected. Other nefarious activity is occurring in the background, including the disabling of legitimate security applications.

The Fake Alert Stinger uses “Super Scan” mode for detection and remediation targeted specifically at fake-alert threats.

Super Scan achieves the following:

• Terminates malicious processes that hinder anti-virus software from running properly
• Restarts the Windows Explorer process to remove any hooks created by malware to prevent re-infections
• Fixes file associations and other registry-based policies that are typically altered by fake-alert threats to remain active or to prevent normal use of system tools

In summary, Super Scan brings an infected system to a state that allows anti-virus software to scan and remediate effectively.

What´s New in version 10.2.0.361:

New Detections:

• Downloader-BMN.gen.b
• Downloader-BMN.gen.c
• FakeAlert-Rena.ar
• FakeAlert-SysDef.r
• Generic Downloader.jf
• Generic Downloader.jg
• Generic Downloader.jh
• Generic Downloader.ji
• Generic Downloader.jj
• Generic FakeAlert.fg
• W32/Autorun.worm.bfb

Enhanced Detections:

• BackDoor-EXI
• BackDoor-EXI.gen.v
• Backdoor-EXI.gen.w
• BackDoor-EXI.gen.x
• Exploit-CVE2010-2568
• FakeAlert-KS
• FakeAlert-Rena.aq
• FakeAlert-SecurityTool
• FakeAlert-SecurityTool.bt
• FakeAlert-SysDef
• FakeAlert-SysDef.b
• FakeAlert-SysRes
• Generic Downloader.hv
• Generic Downloader.in
• Generic Downloader.iq
• Generic Downloader.is
• Generic Downloader.it
• Generic Downloader.iu
• Generic Downloader.ix
• Generic Downloader.jb
• Generic Downloader.z
• Generic Downloader.z!1516DDBD
• Generic FakeAlert!9F6E4576
• Generic FakeAlert.a
• Generic FakeAlert.bz
• Generic FakeAlert.eq
• Generic FakeAlert.fc
• Generic!atr
• VBS/Autorun.worm.k
• W32/Autorun.worm.bep!bat
• W32/Autorun.worm.bez!atr
• W32/Autorun.worm.bx
• W32/Autorun.worm.c
• W32/Autorun.worm.g
• W32/Autorun.worm.g!0BE8F32E
• W32/Rimecud
• W32/Sdbot.worm!54D1EEB9
• W32/Sdbot.worm.gen.ax
• ZeroAccess.b
• ZeroAccess.dr