Categories: FakeTrojan

Trojan.FakeMS.INC removal

The Trojan.FakeMS.INC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.FakeMS.INC virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Executed a process and injected code into it, probably while unpacking
A process was set to shut the system down when terminated
Behavior consistent with a dropper attempting to download the next stage.
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Anomalous binary characteristics

How to determine Trojan.FakeMS.INC?


File Info:
crc32: 63F3E996md5: 51c7d3f4106b5557f9bdfaab4267be80name: 51C7D3F4106B5557F9BDFAAB4267BE80.mlwsha1: b5fc281eb69f928836b87a368c75a463d0e98c32sha256: 9e8daaef763f7ba248c473550d75ec675fa789ed61ac8796dd5357d928fcccadsha512: c800da51283853f39c1a2498e9d6395c38afe81dedfd0fdb25e33cba8ef50b4897e084924ae7b6a2f864c4cb4456c470c372e01f2333d80336ac3fa9491a35c8ssdeep: 768:PpOOOgbxjhv+ZddsrCnDXn2tPIlnXOREbGnFkHjbGyrIMWG5ErjS:PpOOOiGZHkCDG1SmF2jbxWGq6type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
FileDescription: HyperTerminal AppletFileVersion: 5.1.2600.0CompanyName: Hilgraeve, Inc.Translation: 0x0409 0x0000

Trojan.FakeMS.INC also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop4.39226
ClamAV	Win.Adware.Downware-247
McAfee	Trojan-FDQB!51C7D3F4106B
Cylance	Unsafe
Zillya	Backdoor.Androm.Win32.1370
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:Win32/Tobfy.4bf1e6da
K7GW	Trojan ( 005110401 )
K7AntiVirus	Trojan ( 005110401 )
Baidu	Win32.Trojan-Downloader.Zortob.a
ESET-NOD32	Win32/LockScreen.AQT
Zoner	Trojan.Win32.31444
APEX	Malicious
Avast	Win32:Crypt-QOD [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.567469
NANO-Antivirus	Trojan.Win32.Drop.ecvvzj
MicroWorld-eScan	Gen:Variant.Razy.567469
Tencent	Win32.Trojan.Lockscreen.Svrj
Ad-Aware	Gen:Variant.Razy.567469
Sophos	ML/PE-A + Troj/Ransom-UU
Comodo	TrojWare.Win32.Kryptik.BUGZ@57ezjl
BitDefenderTheta	Gen:NN.ZexaF.34628.fy0@amqYh3ei
VIPRE	Trojan.Win32.Reveton.a (v)
TrendMicro	TROJ_SPNR.16FC13
McAfee-GW-Edition	Trojan-FDQB!51C7D3F4106B
FireEye	Generic.mg.51c7d3f4106b5557
Emsisoft	Gen:Variant.Razy.567469 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.dwoyw
Webroot	Trojan.Dropper.Gen
Kingsoft	Win32.Hack.Androm.q.(kcloud)
Microsoft	Ransom:Win32/Tobfy.S
AegisLab	Trojan.Win32.Generic.lJhJ
GData	Gen:Variant.Razy.567469
AhnLab-V3	Downloader/Win32.Andromeda.R66389
Acronis	suspicious
VBA32	TScope.Malware-Cryptor.SB
MAX	malware (ai score=100)
Malwarebytes	Trojan.FakeMS.INC
Panda	Trj/Hexas.HEU
TrendMicro-HouseCall	TROJ_SPNR.16FC13
Rising	Ransom.Tobfy!8.339 (CLOUD)
Ikarus	Trojan.Win32.Reveton
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Lockscreen.LOA!tr
AVG	Win32:Crypt-QOD [Trj]
Qihoo-360	Win32/Trojan.Generic.HgIASOcA