Click on screenshot to zoom
Danger level 8
Type: Trojans
Common infection symptoms:
  • Blocks internet connection
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

FakeScanti

Usually when there is a group of rogues that comes from the same source they definitely have something in common, and that is usually the distribution file. FakeScanti is a Trojan that infects multiple computers and then distributes a whole range of rogue antispyware programs to the infected systems. The list of rogue antispyware applications related to FakeScanti include AV Security 2012, AV Guard Online, Open Cloud AV, Wolfram Antivirus, PC Protector and many others. The overall symptoms of the infections are similar, and they display the usual rogue behavior by sending fake warnings about viruses that do not really exist. FakeScanti tells you that you need to acquire license for the antivirus program (that is actually a rogue) in order to delete malicious programs that are plaguing your computer.

Download Spyware Removal Tool to Remove* FakeScanti
  • Quick & tested solution for FakeScanti removal.
  • 100% Free Scan for Windows

Due to the fact that there are quite a few versions of rogues that come along with FakeScanti, there is also a huge list of files that are associated with this infection. Sometimes it is hard to distinguish a Trojan infection, but that is not the case with FakeScanti, because the first thing that this infection does, it changes your desktop’s wallpaper and “adorns” it with the following message:

DANGER!!!
Your computer is INFECTED!
Attention!!!
Such infection will cause permanent loss of all information stored on your computer: documents, files, etc.
All your secret data like logins, passwords, credit card information can be accessed by third-parties for malicious purposes.
All your online activities like sending e-mails, visiting web-sites are logged and stored on your hard disk. Spyware blocks the deletion of such information from your computer and makes your online actions traceable.
PROTECT YOURSELF!
DELETE SPYWARE FROM YOUR COMPUTER RIGHT NOW!

The irony is in that FakeScanti warns you about things it actually does itself. You can accidentally download this malware when you click on a random link on the internet, and any rogue from the list can be downloaded and installed by an installer component FakeScanti. The program extracts itself automatically and then installs itself, also adding entries to the Programs Start menu and shortcuts to the Desktop. The type of shortcuts depends on which rogue infection has entered your computer.

Once the rogue that belongs to the FakeScanti family is run, it displays fake security warnings, and makes it look like it is a legitimate part of Windows operating system. What is more, FakeScanti also does not allow you to run various executables. Whenever you try to run a problem it will state the following:

The application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem.

FakeScanti is known to block Internet Explorer, various computer security programs, MS Word and other executables. Also, keep in mind that it doesn’t block executables when the fake malware scanner is open. Also, aside from blocking the programs, FakeScanti spams you with a variety of pop-up security messages. All of them say that your system is under attack and you are urged to fix the problem by purchasing the full version of the rogue. For example:

Warning: Infection is Detected
Windows has found spyware infection on your computer! Click here to update your Windows antivirus software

Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.

On top of that FakeScanti also blocks your access to various websites, step by step slowing down your system, and making it virtually inoperable. You need to acquire a powerful security tool that would help you to remove FakeScanti and all of its components from your computer automatically. Dealing with this infection on your own might be challenging because it is multilayered and very pervasive. Do not hesitate to trust a good computer safeguard program, and once you have exterminated FakeScanti for good, protect your system from similar threats.

Download Spyware Removal Tool to Remove* FakeScanti
  • Quick & tested solution for FakeScanti removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove FakeScanti

Files associated with FakeScanti infection:

ZCCeelIIBrPNyA1.exe
fF4pmG5sQ6E8R9T.exe
~!#AD0E.tmp
wmplayer.exe
ornt.exe
iTunes.exe
HQQQJ66dEK8.exe
GIIBBrzPNyxA1.exe
rqqqhYYCw.exe
FuuuvSS2obFpmGa.exe
sbr32.dll
HAAA11uvS2ob3pG.exe
tvq.exe
o5sQJ7dEKgZhXj.exe
eXwwwkUVelO.exe
atm.exe
gtzP0ycS1v3n4m6.exe
WYXXwkkUVelB.exe
ChhYXjUelBm5Q6E.exe
zCwwkkUVrlOBxPy.exe
y0uuucS1ibD3oG.exe
xbbF3pmmG5QJ6Kf.exe
x000ucSS1ib3oG4.exe
WQJJJ6dEK.exe
wels.exe
w666dWWK7fR9gXq.exe
VLTqjCkrtxP0cSi.exe
UBtzPNycAuDoFp.exe
TF4amH5sW7E8RqY.exe
T6dWK7fRLgXjCkV.exe
System Security 2012v121.exe
sysl32.dll
svhostu.exe
svhost.exe
rtPNycc1uD2b.exe
rsWK7fEL9TqY.exe
rrrrzPPNyxA1.exe
rPNyxA1uv2b3m5Q.exe
rDDonFpm5sJd.exe
QvKV26hz3LzSG7.exe
qtime8_32.exe
qmie.exe
PvSSS2obF3p.exe
ponF4amH5W7E8Rq.exe
oYCekIBrzNx1v2b.exe
Ortc3n4mWJ7L8.exe
OpenCloud Security.exe
OkUUVVelOBtz0.exe
nqqjjYCwwkVrlNt.exe
NEELL8ggTZh.exe
n6dEK8fRZhXjClB.exe
mZCwkIVrlNx0Do4.exe
mVrzONtxAuSiDpG.exe
MgKPyEORiQUvGj.exe
LNNNtxxA0uc2iF3.exe
JQQQH66dWK7fL9T.exe
JmmG5sQJ6dK8R9T.exe
jcS1ibD3oGaHs.exe
java.exe
IsssQJJ6dEKfR9h.exe
ippmmH55sQJdE8R.exe
IHHH6dWWK7RL.exe
iexplore.exe
I3onF4amHsJdLgZ.exe
HcccS11ivD3oF4m.exe
GVrOtxA0uSiFpGa.exe
guvSSiiF3pn5Q6d.exe
gNyA0uvG5Q6RhXk.exe
GivD3onF4m5W7E8.exe
fxP0ycS1iDoFaHs.exe
fkpu.exe
firefox.exe
EuvvSS2obF.exe
epppmGG5sQJ.exe
enF4amH5sJdLgZh.exe
ehTXwjUVeItPyAi.exe
ECUryc1iDJhwlcD.exe
daammH66sWJfE8g.exe
cwkkUUVrl.exe
csrss.exe
conhost.exe
Cloud AV 2012v121.exe
chrome.exe
CcccS2ibbDpnGa.exe
c55sWJJ7dE8g.exe
BPNyxA1uv2b3m5Q.exe
aYYYwkkUVelBzPy.exe
AycA1uvD2b4m5Q6.exe
AV Security 2012v121.exe
AV Protection 2011v121.exe
AiivvD33oG4aH6W.exe
AGG44amHH.exe
5DEB.exe
0.915961589453152.exe
0.5976644786113264.exe
0.4220725905837356.exe
0.35086224571441926.exe

FakeScanti DLL's to remove:

sbr32.dll
sysl32.dll

FakeScanti processes to kill:

ZCCeelIIBrPNyA1.exe
fF4pmG5sQ6E8R9T.exe
wmplayer.exe
ornt.exe
iTunes.exe
HQQQJ66dEK8.exe
GIIBBrzPNyxA1.exe
rqqqhYYCw.exe
FuuuvSS2obFpmGa.exe
HAAA11uvS2ob3pG.exe
tvq.exe
o5sQJ7dEKgZhXj.exe
eXwwwkUVelO.exe
atm.exe
gtzP0ycS1v3n4m6.exe
WYXXwkkUVelB.exe
ChhYXjUelBm5Q6E.exe
zCwwkkUVrlOBxPy.exe
y0uuucS1ibD3oG.exe
xbbF3pmmG5QJ6Kf.exe
x000ucSS1ib3oG4.exe
WQJJJ6dEK.exe
wels.exe
w666dWWK7fR9gXq.exe
VLTqjCkrtxP0cSi.exe
UBtzPNycAuDoFp.exe
TF4amH5sW7E8RqY.exe
T6dWK7fRLgXjCkV.exe
System Security 2012v121.exe
svhostu.exe
svhost.exe
rtPNycc1uD2b.exe
rsWK7fEL9TqY.exe
rrrrzPPNyxA1.exe
rPNyxA1uv2b3m5Q.exe
rDDonFpm5sJd.exe
QvKV26hz3LzSG7.exe
qtime8_32.exe
qmie.exe
PvSSS2obF3p.exe
ponF4amH5W7E8Rq.exe
oYCekIBrzNx1v2b.exe
Ortc3n4mWJ7L8.exe
OpenCloud Security.exe
OkUUVVelOBtz0.exe
nqqjjYCwwkVrlNt.exe
NEELL8ggTZh.exe
n6dEK8fRZhXjClB.exe
mZCwkIVrlNx0Do4.exe
mVrzONtxAuSiDpG.exe
MgKPyEORiQUvGj.exe
LNNNtxxA0uc2iF3.exe
JQQQH66dWK7fL9T.exe
JmmG5sQJ6dK8R9T.exe
jcS1ibD3oGaHs.exe
java.exe
IsssQJJ6dEKfR9h.exe
ippmmH55sQJdE8R.exe
IHHH6dWWK7RL.exe
iexplore.exe
I3onF4amHsJdLgZ.exe
HcccS11ivD3oF4m.exe
GVrOtxA0uSiFpGa.exe
guvSSiiF3pn5Q6d.exe
gNyA0uvG5Q6RhXk.exe
GivD3onF4m5W7E8.exe
fxP0ycS1iDoFaHs.exe
fkpu.exe
firefox.exe
EuvvSS2obF.exe
epppmGG5sQJ.exe
enF4amH5sJdLgZh.exe
ehTXwjUVeItPyAi.exe
ECUryc1iDJhwlcD.exe
daammH66sWJfE8g.exe
cwkkUUVrl.exe
csrss.exe
conhost.exe
Cloud AV 2012v121.exe
chrome.exe
CcccS2ibbDpnGa.exe
c55sWJJ7dE8g.exe
BPNyxA1uv2b3m5Q.exe
aYYYwkkUVelBzPy.exe
AycA1uvD2b4m5Q6.exe
AV Security 2012v121.exe
AV Protection 2011v121.exe
AiivvD33oG4aH6W.exe
AGG44amHH.exe
5DEB.exe
0.915961589453152.exe
0.5976644786113264.exe
0.4220725905837356.exe
0.35086224571441926.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.