Fake Trojan

How to remove “Trojan.Fakealert.50507”?

Malware Removal

The Trojan.Fakealert.50507 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Fakealert.50507 virus can do?

  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Fakealert.50507?


File Info:

name: EA2B7577D2728A61AE10.mlw
path: /opt/CAPEv2/storage/binaries/c39b8c598cac81ad365c1fd8bc817efdcefb8c6d42bd81a49aebcf9498c62276
crc32: 135A073E
md5: ea2b7577d2728a61ae10c337bf53b789
sha1: 0687b827b6ba97a68039127b537181251c4fad5f
sha256: c39b8c598cac81ad365c1fd8bc817efdcefb8c6d42bd81a49aebcf9498c62276
sha512: 80c1d1027ba45c226a0125ecd525fca98076187f1b287b8604eb24453307088a2fac1e9bed069cd7efcc4e735259913aa194f30467293eb60cdcf6f01dcaf332
ssdeep: 24576:WIwkCRuc10fJv1YwsBoSAK67rmdaSDXQl8mristtuUFbwqVTEhqf7Ep5SKDv1/jt:WIkaSormdaSh/sttuUFjTEhqTASy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A7A6AF7835097CF6E5AB0737CD86D9F813367A31AA4B54DD52A8B78A0D73331EE06806
sha3_384: f2f02f66510db4707b0434b2eb07dd4872514317ba64b9bbb8f488082e58aa53522f2ae18bc2c86826feb705b2621c9c
ep_bytes: 558bec83c4f0b878385500e8d0cceaff
timestamp: 2012-12-12 15:02:13

Version Info:

0: [No Data]

Trojan.Fakealert.50507 also known as:

MicroWorld-eScanTrojan.Fakealert.50507
ALYacTrojan.Fakealert.50507
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusJokeProgram ( 0055e3f31 )
K7GWJokeProgram ( 0055e3f31 )
Cybereasonmalicious.7d2728
VirITTrojan.Win32.FakeAV.AJBC
CyrenW32/Downloader.FN.gen!Eldorado
SymantecMobileInsightAppRisk:Generisk
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Hoax.ArchSMS.XW
APEXMalicious
ClamAVWin.Trojan.Hoax-843
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Fakealert.50507
NANO-AntivirusRiskware.Win32.ArchSMS.brmfey
AvastWin32:SMSSend-BVI [Trj]
TencentMalware.Win32.Gencirc.10c2c1c8
Ad-AwareTrojan.Fakealert.50507
SophosMal/ArchSMS-A
ComodoApplicUnwnt.Win32.Hoax.ArchSMS.XW@4s9j8p
DrWebTrojan.SMSSend.3434
ZillyaTool.ArchSMS.Win32.9109
TrendMicroTROJ_ANDROID_CA08368F.TOMC
McAfee-GW-EditionBehavesLike.Win32.Dropper.tm
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.ea2b7577d2728a61
EmsisoftTrojan.Fakealert.50507 (B)
SentinelOneStatic AI – Malicious PE
GDataTrojan.Fakealert.50507
JiangminHoax.ArchSMS.rng
AviraTR/ATRAPS.Gen
ArcabitTrojan.Fakealert.DC54B
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.ArchSMS.R47631
Acronissuspicious
McAfeeGenDownloader.oc
MAXmalware (ai score=84)
VBA32Adware.DealPly
TrendMicro-HouseCallTROJ_ANDROID_CA08368F.TOMC
RisingTrojan.Generic@AI.99 (RDML:/GQ51WhBqe59f/lhI0d1hA)
YandexTrojan.GenAsa!zEyF6MaFanw
IkarusPUA.Hoax.ArchSMS
FortinetW32/HoaxSMS.OD!tr
BitDefenderThetaAI:Packer.67C7EA1419
AVGWin32:SMSSend-BVI [Trj]
PandaTrj/Genetic.gen

How to remove Trojan.Fakealert.50507?

Trojan.Fakealert.50507 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment