www.esecurityplanet.com/alerts/article.php/3754141
Back to Article

6/19: Mal/FakeAle-A Malware Displays Fake Infection Warnings
By
June 19, 2008

Mal/FakeAle-A is a family of malware that may display spurious warnings about the computer being infected with other malware.

Members of Mal/FakeAle-A typically copy themselves to the root of drive C: and create the following registry entry to run themselves on restart:

SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Sys(number).exe
C:\Sys(number).exe

More information can be found at this Sophos page.