Voir cette page pour les versions 2010 : http://forum.malekal.com/win32-fakerean-t23860.html
Même chose le nom des rogues changent selon la version de Windows :
Windows XP :
Windows 7 Rogue Name
XP Antispyware 2011
XP Security 2011
XP Internet Security
XP Internet Security 2011
XP Antimalware 2011
Windows Vista :
Windows Seven :Vista Antispyware
Vista Antispyware 2011
Vista Security 2011
Vista Internet Security
Vista Internet Security 2011
Vista Antimalware 2011
Les messages d'alertes :Win 7 Antispyware
Win 7 Antispyware 2011
Win 7 Security
Win 7 Security 2011
Win 7 Internet Security
Win 7 Internet Security 2011
Win 7 Antimalware
Win 7 Antimalware 2011
Win 7 Guard
Win 7 Internet Security 2011 Firewall Alert
XP Antispyware 2011 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.
Le fichier droppé : pw.exeInternet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
- Dangerous code found in this site's pages which installed unwanted software into your system.
- Suspicious and potentially unsafe network activity detected.
- Spyware infections in your system
- Complaints from other users about this site.
- Port and system scans performed by the site being visited.
Things you can do:
- Get a copy of Vista Antispyware 2011 to safeguard your PC while surfing the web (RECOMMENDED)
- Run a spyware, virus and malware scan
- Continue surfing without any security measures (DANGEROUS)
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*