What is “FakeAlert.93”?

The FakeAlert.93 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What FakeAlert.93 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Removes Security and Maintenance icon from Start menu, Taskbar and notifications
• Authenticode signature is invalid
• CAPE detected the shellcode patterns malware family
• Attempts to modify proxy settings
• Attempts to modify or disable Security Center warnings
• Attempts to modify user notification settings
• Yara detections observed in process dumps, payloads or dropped files

How to determine FakeAlert.93?

File Info:
name: A52B2FE63ABBD05D51B0.mlw
path: /opt/CAPEv2/storage/binaries/cb6591b5f6db22e339aa57d3045edb529e24c410b9af96293660f8434bad9b27
crc32: 70284AC9
md5: a52b2fe63abbd05d51b09e21c4730c49
sha1: b0eaa924918564905c5ffd78ca8d6f608203240d
sha256: cb6591b5f6db22e339aa57d3045edb529e24c410b9af96293660f8434bad9b27
sha512: 66142372b84231b9c3f21c768e2665979a2b5dd38831da752975116976954ffa49426766c88d22bdf4bab13284ce0e102023c319f692b476be5f0a7ceecbe79d
ssdeep: 12288:P8B+d+iWpNoQaPAcGuYNDsljQY4uCxBduLg0yUf:AVT5TcGKlv4TduJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12D94F10074D85C11F4C2F9F81795C916C6689D0B8224FA9BAA78BE1FB5322E7FC54B4E
sha3_384: a9041f96db60bb31f0e6aae4228a5a2760c33ae47be86bbeadd7eb78e9bbeae43fa3d52510aea6b5864c4c07441373da
ep_bytes: 6a606838814100e871130000bf940000
timestamp: 2012-04-28 10:21:12

Version Info:
0: [No Data]

FakeAlert.93 also known as:

How to remove FakeAlert.93?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.