How to remove “Mal/FakeAV-OZ”?

The Mal/FakeAV-OZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/FakeAV-OZ virus can do?

Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Mal/FakeAV-OZ?


File Info:
crc32: BDCCC351
md5: ecfb52d387865a9d3d34e9456ad67bdf
name: 4-cm4.exe
sha1: 0ad2d2a512babdd64db72ac61e2f40e207d827d6
sha256: c1141bc809cc84e4c89d7c28facfebea5ae6907ba2de3830c97fcea8a4dcb641
sha512: ab22f5ce7849ef649d62fd5b8ddde26ca99a1e7214fc6eb6b4c96e0876c80b5d22d5b3108441d5d9eace797ea9507c669a1a6152ec9d10d840f9db1b8e7d900a
ssdeep: 768:X5ihZh6X5XdaNbF9GP9kmP7p61pxt95j0Vz:XMkXOdFwP2mPOpl5wVz
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Mal/FakeAV-OZ also known as:

MicroWorld-eScan	Trojan.GenericKD.42080214
McAfee	Artemis!ECFB52D38786
AegisLab	Trojan.Win32.Zbot.tnYI
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.42080214
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Arcabit	Trojan.Generic.D28217D6
TrendMicro	TROJ_GEN.R002C0RL519
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0RL519
Emsisoft	Trojan.GenericKD.42080214 (B)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.dz
FireEye	Trojan.GenericKD.42080214
Sophos	Mal/FakeAV-OZ
APEX	Malicious
Fortinet	W32/FakeAV.PA
Microsoft	Trojan:Win32/Wacatac.C!ml
VBA32	BScope.Worm.Hokobot
ALYac	Trojan.GenericKD.42080214
MAX	malware (ai score=99)
Ad-Aware	Trojan.GenericKD.42080214
Cylance	Unsafe
Rising	Trojan.Bitrep!8.F596 (CLOUD)
GData	Trojan.GenericKD.42080214
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen

How to remove Mal/FakeAV-OZ?

Mal/FakeAV-OZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X