About “FakeAV.122” infection

The FakeAV.122 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What FakeAV.122 virus can do?

Network activity detected but not expressed in API logs

How to determine FakeAV.122?


File Info:
crc32: 86EDE4D3
md5: 62680d05e9488fe0d7efc4f7722182f4
name: dup2.exe
sha1: ba1c0610377872f72ac5a611b07f048e81a572b7
sha256: dc5eabf5d62a3834d276b46088da74acd7107d9e354360646ac712ccaa816fae
sha512: 41581c3ed5266bb55006365dea3ada53f07959bf70ddaa0b87fb0111388206bbddbc4cefea9df7d2aed76e860ff432cd193e40acdf0a5bbf141b269ee7e2897f
ssdeep: 12288:hR6XtldFtF93Em1Y4XAJpJppXKoTTgIQH6Cx2k/Agb:hRf98pIp4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: dUP2
FileVersion: 2.20
CompanyName: diablo2oo2
ProductName: diablo2oo2's Universal Patcher
ProductVersion: 2.20
FileDescription: diablo2oo2's Universal Patcher
OriginalFilename: dUP2.exe
Translation: 0x0409 0x04b0

FakeAV.122 also known as:

MicroWorld-eScan	Gen:Variant.FakeAV.122
CAT-QuickHeal	HackTool.Patcher.A
McAfee	Artemis!62680D05E948
Cylance	Unsafe
BitDefender	Gen:Variant.FakeAV.122
Invincea	heuristic
Cyren	W32/Risk.FOEW-5730
TrendMicro-HouseCall	TROJ_SPNR.29BB13
ClamAV	Win.Trojan.Patcher-60
GData	Gen:Variant.FakeAV.122
Alibaba	HackTool:Win32/Patcher.af73b717
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.FakeAV.122 (B)
Comodo	Malware@#dlejpqu6frt0
DrWeb	Tool.Patcher.126
McAfee-GW-Edition	BehavesLike.Win32.PUP.fh
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.62680d05e9488fe0
Sophos	Keygen (PUA)
SentinelOne	DFI – Malicious PE
F-Prot	W32/MalwareF.YSGQ
Webroot	W32.Malware.Heur
Arcabit	Trojan.FakeAV.122
Microsoft	PUA:Win32/Keygen
Acronis	suspicious
ALYac	Gen:Variant.FakeAV.122
MAX	malware (ai score=80)
Ad-Aware	Gen:Variant.FakeAV.122
Malwarebytes	HackTool.Agent
ESET-NOD32	a variant of Win32/HackTool.Patcher.N potentially unsafe
Rising	Trojan.Win32.Generic.127C6CB7 (C64:YzY0OqYbsqTm1nXJ)
Ikarus	Trojan.Win32.Genome
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/Patcher.N!tr
Cybereason	malicious.5e9488
CrowdStrike	win/malicious_confidence_90% (D)

How to remove FakeAV.122?

FakeAV.122 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X