Rogue Antivirus Terminates Exe Files

[Peaches]

Jul26

Rogue Antivirus Terminates EXE Files

9:02 pm (UTC-7) | by Erika Mendoza (Threat Response Engineer)

This weekend, we at TrendLabs came across a FAKEAV variant similar to the one peddled in the solar eclipse 2009 in America attack in this recent blog post. This one, however, introduces another new scare tactic (so far the latest new ploy we’ve seen is the ransomware/FAKEAV that encrypts files in the infected computer and offers a bogus fixtool for a price).

This FAKEAV variant terminates any executed file with an .EXE file extension and displays a pop-up message saying that the .EXE file is infected and cannot execute.

details & screenshots - http://blog.trendmicro.com/