TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TROJ_FAKEAV.BIM
Overview

Malware type: Trojan

Aliases: No Alias Found

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Medium

Distribution potential:

Low

Description: 

This Trojan has received attention from independent media sources and/or other security firms.

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

TROJ_FAKEAV.BIM Behavior Diagram

Malware Overview

This Trojan may be downloaded from certain remote sites.

It also downloads a file from a certain URL and renames it when stored in the affected system. It saves the downloaded files as TROJ_YEKTEL.AA. It then executes the downloaded files. As a result, malicious routines of the downloaded files are exhibited on the affected system.

It creates mutex(es) to ensure that only one instance of itself is running in memory.

For additional information about this threat, see:
Solution
Technical Details

Description created: Jun. 3, 2009 9:11:37 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.