Fake Trojan

How to remove “Trojan.FakeAlert.CUY”?

Malware Removal

The Trojan.FakeAlert.CUY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.FakeAlert.CUY virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses suspicious command line tools or Windows utilities

How to determine Trojan.FakeAlert.CUY?


File Info:

name: 73F58449E7FB0E68471F.mlw
path: /opt/CAPEv2/storage/binaries/7221eece457df4f304d997ab4bd3335131e2253c0319615d395934df5f8d1cb9
crc32: 2D49CB93
md5: 73f58449e7fb0e68471f8a2c7ab06f25
sha1: a9d4f13a2c92c5f2e18e81c622e4187fc40ca275
sha256: 7221eece457df4f304d997ab4bd3335131e2253c0319615d395934df5f8d1cb9
sha512: 09e3a948786b0f9e9fe2a5b376323f840fe2471369861c21c467ac5b285c5215305a8fdd590de421d70bed09b37a16b53c379e0b5bc7077d70853a13ce383e74
ssdeep: 1536:PzEUN64sXxDx+OqHHUK2P6tBof0x4hTpwgRr:PzN6VxD6UK2PgKf0ShFww
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17253CF126000B2A3C97E5BB50BBE3FA896EBC509D2D1258734D0F3C899629145FFD2B3
sha3_384: 808f0f937d6a9f349f157ae7ae90bfa4d94c2f78e2d17f9ea4e909d1a59cf35f841c392dcf93da9b38b5038838081d23
ep_bytes: bb183e0000558bec83ec0cc745f4dcef
timestamp: 2011-05-22 09:14:28

Version Info:

0: [No Data]

Trojan.FakeAlert.CUY also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.lw2f
AVGWin32:MalOb-IJ [Cryp]
MicroWorld-eScanTrojan.FakeAlert.CUY
CAT-QuickHealTrojanPWS.Zbot.Gen
ALYacTrojan.FakeAlert.CUY
MalwarebytesTrojan.Agent.MRGGen
ZillyaTrojan.Birele.Win32.194
SangforVirus.Win32.Save.a
K7AntiVirusTrojan ( 00390b3d1 )
AlibabaVirTool:Win32/Obfuscator.8262b542
K7GWTrojan ( 00390b3d1 )
Cybereasonmalicious.9e7fb0
VirITTrojan.Win32.Generic.N
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.AEPA
CynetMalicious (score: 100)
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.FakeAlert.CUY
NANO-AntivirusTrojan.Win32.Kryptik.nmgjr
SUPERAntiSpywareTrojan.Agent/Gen-Remnat
AvastWin32:MalOb-IJ [Cryp]
TencentWin32.Trojan.Generic.Kqil
EmsisoftTrojan.FakeAlert.CUY (B)
F-SecureTrojan.TR/Obfuscate.xinma
DrWebTrojan.Packed.22400
VIPRETrojan.FakeAlert.CUY
TrendMicroTROJ_RANSOM.BYZ
McAfee-GW-EditionBehavesLike.Win32.Generic.kc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.73f58449e7fb0e68
SophosMal/Katusha-J
SentinelOneStatic AI – Suspicious PE
GDataTrojan.FakeAlert.CUY
JiangminTrojan.Generic.hppxh
WebrootW32.Trojan.Gen
AviraTR/Obfuscate.xinma
MAXmalware (ai score=100)
Antiy-AVLTrojan[Ransom]/Win32.PornoAsset
XcitiumTrojWare.Win32.Kryptik.ALBY@4qjrmo
ArcabitTrojan.FakeAlert.CUY
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftVirTool:Win32/Obfuscator.XI
GoogleDetected
AhnLab-V3Trojan/Win32.Zbot.R23834
McAfeePWS-Zbot.gen.azp
VBA32Trojan-Ransom.Winlock.2847
Cylanceunsafe
PandaTrj/Xpacked.A
TrendMicro-HouseCallTROJ_RANSOM.BYZ
RisingTrojan.Kryptik!8.8 (TFE:4:xKjIDcxOxuG)
IkarusTrojan-Ransom.Birele
MaxSecureTrojan.Malware.3870990.susgen
FortinetW32/ZeroAccess.B!tr
BitDefenderThetaGen:NN.ZexaF.36196.dOW@a89EHjk
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.FakeAlert.CUY?

Trojan.FakeAlert.CUY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment