XP Antivirus 2012 – The Threat Is Still There!

Date: June 24, 2011

As it has been already figured out, XP Antivirus 2012 is considered to be one of the latest rogueware applications, which tries to gain access to computers. It pretends to be legitimate security software but in fact is a Trojan based program that is aimed only at misleading innocent victims into purchasing its full version.

This virus can be seen under different names such as Win 7 Antispyware 2012, Vista Antivirus 2012, XP Security 2012, etc. All of these infections are transferred either via fake online anti-malware scanners or while browsing hacked web sites. The application has been created in such a way that it is downloaded and installed without your knowledge and permission. When it enters your PC, it pretends that the system is in trouble and there is severe infection. To make you believe in these empty threats it will display false scan results, which state that numerous viruses have been detected.


After inspection of the virus, VirusTotal provided the following information: antivirus applications detect this program as an intruder 31 times out of 42, e.g. 73,8% of scan results report this application as malicious.


Antivirus Vendor  Alias Name
AhnLab-V3 Trojan/Win32.FakeAV
AntiVir TR/Fake.Rean.1216
Antiy-AVL Hoax/Win32.ExpProc.gen
Avast  Win32:Renosa-I
Avast5 Win32:Renosa-I
AVG  Generic23.EWC
BitDefender Trojan.Generic.KD.243910
CAT-QuickHeal Hoax.ExpProc.aalj (Not a Virus)
Comodo TrojWare.Win32.Trojan.Agent.Gen
DrWeb Trojan.FakeAV.5744
eSafe  Win32.TRFake.Rean
 F-Secure  Trojan.Generic.KD.243910
 GData Trojan.Generic.KD.243910
 Ikarus  Trojan.SuspectCRC
 K7AntiVirus  Riskware
 Kaspersky  Hoax.Win32.ExpProc.aalj
 McAfee  FakeAlert-Rena.n
 Microsoft  Rogue:Win32/FakeRean
 NOD32  a variant of Win32/Kryptik.OSN
 Norman  W32/FakeAV.AEDB
 nProtect  Gen:Variant.Dropper.3
 Panda  Suspicious file
 PCTools  Trojan.Gen
Sophos Troj/MsctfDll-B
SUPERAntiSpyware Trojan.Agent/Gen-RogueAV
Symantec Trojan.Gen
TheHacker Trojan/ExpProc.aalj
TrendMicro Cryp_FakeAV-53
TrendMicro-HouseCall Cryp_FakeAV-53
VIPRE FraudTool.Win32.FakeRean.i (v)

The size of the installation file of this application is 339968 bytes. It also uses the MD5 signature ae331dd3ba5b83f806a1bc9099c854a8. These characteristics can help you identify this program.

Although this application may seem harmless actually it can cause serious problems. It starts with installing itself without your knowledge. Once active, the virus displays numerous annoying pop-up messages and frightening alerts. It can connect to the Internet without your permission or slow the connection. Eventually, this malicious program slows your computer performance. To protect your personal information you have to remove the application. Only in this way you can ensure the safety of your computer.



Home Latest Rogue AntiSpyware XP Antivirus 2012 – The Threat Is Still There!

Leave a Reply

What is 15 + 10 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math.