BAT/Hoax.FakeFileCoder.AR malicious file

The BAT/Hoax.FakeFileCoder.AR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BAT/Hoax.FakeFileCoder.AR virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine BAT/Hoax.FakeFileCoder.AR?


File Info:
crc32: 662AFFCD
md5: ca5377d943b158bd909779939439546a
name: CA5377D943B158BD909779939439546A.mlw
sha1: d4830a406cc5c358a7552961d1620b4db3571dc3
sha256: ceb96adc4a9ae70549b2489be7894c149b4bc39f79e5979e05f311001f95fe55
sha512: bf7c19423e745ef874c87f25ac79b0476a649e8ababacdf310ca3fddc8cb537bc601cdd63244f6dbd161f54fafe345a6c4cedb72ac3b4b2ebf5e9beca8dcf20c
ssdeep: 6144:3fsd47W6Q4PGWMK/bJ7dF3vcdT+t7bzyHf:vsOW6Q4OWz9h8T+t7bzyHf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

BAT/Hoax.FakeFileCoder.AR also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005897a01 )
Cylance	Unsafe
Alibaba	Ransom:Win32/Instructions.3497741e
K7GW	Trojan ( 005897a01 )
Cyren	W32/Trojan.AHNW-0904
ESET-NOD32	BAT/Hoax.FakeFileCoder.AR
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Instructions.wz
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
eGambit	Unsafe.AI_Score_75%
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
McAfee	Artemis!CA5377D943B1
MaxSecure	Win.MxResIcn.Heur.Gen
AVG	Win32:Malware-gen

How to remove BAT/Hoax.FakeFileCoder.AR?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

BAT/Hoax.FakeFileCoder.AR malicious file