Fake

How to remove “Mal/Fakecor-B”?

Malware Removal

The Mal/Fakecor-B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Fakecor-B virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Mal/Fakecor-B?


File Info:

name: 6A10F17F1985CB928D35.mlw
path: /opt/CAPEv2/storage/binaries/1fd32e597f76f8fc425df4d1986cab550a8c061a59c35de0af192718f048c964
crc32: C80C8F49
md5: 6a10f17f1985cb928d35f4865e0ca315
sha1: 9aa57e0e26a05b7a0634beefebcbd90a8527d56c
sha256: 1fd32e597f76f8fc425df4d1986cab550a8c061a59c35de0af192718f048c964
sha512: c906d5f08d113e1b4431e3ed3473ef480f036cd4ebe5a6f4a73d25e87239ed479da77cd34d8219f33d9203f5a919e64dfcceca29b1422de5c60c3f6d8b983f7a
ssdeep: 384:25wW0fSkNCLiGLOZOC9LKC5idGq/+j0G:25mfa7Ndsq/Y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FAD2C717B72473B2C8491B7028D6C6A9BE727D210F439E47334C767B7EA2BA14909936
sha3_384: 877f3c290c9cc94b000162922d50f0c9af43f6ff197729978a91cdaf3bab927fd523e89b74af684133a5ed3deeea196b
ep_bytes: 685c114000e8c4f8ffffff2540104000
timestamp: 2011-03-16 22:34:21

Version Info:

0: [No Data]

Mal/Fakecor-B also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.Heur.bmW@vf2@iipiJ
FireEyeGeneric.mg.6a10f17f1985cb92
CAT-QuickHealTrojan.VBCrypt.MF.1
SkyhighBehavesLike.Win32.Downloader.mz
McAfeeGenericRXAA-FA!6A10F17F1985
Cylanceunsafe
ZillyaTrojan.Injector.Win32.40760
SangforSuspicious.Win32.Save.vb
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Injector.1d158ea0
K7GWRiskware ( 0015e4f01 )
K7AntiVirusRiskware ( 0015e4f01 )
ArcabitTrojan.Heur.EEC7E2
BitDefenderThetaAI:Packer.A2DF6A291D
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Injector.FZT
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0RBD24
KasperskyUDS:Trojan.Win32.Generic
BitDefenderGen:Trojan.Heur.bmW@vf2@iipiJ
NANO-AntivirusTrojan.Win32.MLW.depwq
AvastWin32:TrojanX-gen [Trj]
TencentMalware.Win32.Gencirc.140189f2
EmsisoftGen:Trojan.Heur.bmW@vf2@iipiJ (B)
F-SecureTrojan.TR/Dropper.Gen
VIPREGen:Trojan.Heur.bmW@vf2@iipiJ
TrendMicroTROJ_GEN.R002C0RBD24
Trapminemalicious.moderate.ml.score
SophosMal/Fakecor-B
IkarusTrojan.Loader
GoogleDetected
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Agent.ASSP@57e3y8
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmUDS:Trojan.Win32.Generic
GDataGen:Trojan.Heur.bmW@vf2@iipiJ
CynetMalicious (score: 100)
VBA32Trojan.VB.Pedro
ALYacGen:Trojan.Heur.bmW@vf2@iipiJ
MAXmalware (ai score=100)
MalwarebytesGeneric.Malware.AI.DDS
PandaGeneric Malware
RisingHackTool.Vbinder!8.4E7 (TFE:5:hoCdevUHlAS)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.2588.susgen
FortinetW32/VBInjector.fam!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
alibabacloudTrojan[dropper]:Win/Generic

How to remove Mal/Fakecor-B?

Mal/Fakecor-B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment