Mal/FakeAv-JT removal guide

The Mal/FakeAv-JT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/FakeAv-JT virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Mal/FakeAv-JT?


File Info:
name: 30A2D27F2C45B5713EED.mlw
path: /opt/CAPEv2/storage/binaries/2172b0814e79d2cf3936844f922d6db60984ef453c7f580bad99de1af8bda1a7
crc32: 5BEA0093
md5: 30a2d27f2c45b5713eed44e485b4cf83
sha1: 552699a37ed1fe36f7568a4cd002126717adbf5d
sha256: 2172b0814e79d2cf3936844f922d6db60984ef453c7f580bad99de1af8bda1a7
sha512: f6c7f58aff921cddb01af251084ee526cbca5ecdd796cf565e882b467f5df593b4ba9cda9cb8a4cd235faa6df9aed59e7557c6e78fa8a0dc7d3a1e3eb9227459
ssdeep: 1536:IjCBLypAx3k64k8eBBEZf/hwLPQL4IRetf9cDjDkkJCq1r:JJHBBEZx0P+vgtfMjokYq1r
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10A93E832E356B42BC61334336A6D6ADF20AC67B40566544FEB4C1E2C67B9B92C233747
sha3_384: dda83bdd69f030005d35f5299b68646ac2ceec3dfdb412905b399d04f912f70384c09983377fcb2e178dfbba12462217
ep_bytes: 
timestamp: 2011-01-13 11:56:16

Version Info:
0: [No Data]

Mal/FakeAv-JT also known as:

Alibaba	Trojan:Application/FakeAv.466cdeb8
VirIT	Trojan.Win32.Scar.NJ
SUPERAntiSpyware	Trojan.Agent/Gen-FraudSec
Zillya	Trojan.FakeAV.Win32.236744
TrendMicro	TROJ_FAKEAV_CA250257.TOMC
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.high.ml.score
Sophos	Mal/FakeAv-JT
Webroot	W32.Malware.Gen
Antiy-AVL	Trojan/Win32.TSGeneric
Xcitium	Heur.Corrupt.PE@1z141z3
Google	Detected
VBA32	Heur.Malware-Cryptor.Hlux
TrendMicro-HouseCall	TROJ_FAKEAV_CA250257.TOMC
Rising	Trojan.Generic@AI.97 (RDMK:II/N9W6uq9Rq5HojpDRGfw)
Fortinet	W32/FakeAV.JT!tr
DeepInstinct	MALICIOUS

How to remove Mal/FakeAv-JT?

Mal/FakeAv-JT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X