Fake • Trojan

Trojan.MSIL.FakeSupport (file analysis)

Malware Removal

The Trojan.MSIL.FakeSupport is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.MSIL.FakeSupport virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan.MSIL.FakeSupport?



File Info:

crc32: 6418F49A
md5: a8682779dfe37d895663cbca3a3d4b5c
name: A8682779DFE37D895663CBCA3A3D4B5C.mlw
sha1: ac3b0e6f57e43865ac1972499d558e998def8962
sha256: ae4164f0e3329f3e3bf087fc27aaac3757ba5c01d1053262ee774b769f6c4c5f
sha512: 6202a82ca0f3735a045cc8aa0f7ad6cc0fe8b8a1bd51f8505fd211aad73157b84dacf907a7185b043a49e3cdc9b91c6472e3adee05d42cedd7fac20dab9ea3c9
ssdeep: 6144:m7W2rvVNi9IY2enhzSs75/KrbgxkQFpFXvGp4Ftpj3el71LIVqd75zS+x:0HyIXepSoabT+FXtt8l79IVqPO
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2014
Assembly Version: 1.0.0.0
InternalName: WindowsFormsApplication1.exe
FileVersion: 1.0.0.0
ProductName: WindowsFormsApplication1
ProductVersion: 1.0.0.0
FileDescription: WindowsFormsApplication1
OriginalFilename: WindowsFormsApplication1.exe

Trojan.MSIL.FakeSupport also known as:

K7AntiVirusTrojan ( 0053fcf01 )
CynetMalicious (score: 99)
ALYacGen:Variant.MSILPerseus.156775
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaTrojan:MSIL/FakeSupport.954eced5
K7GWTrojan ( 0053fcf01 )
Cybereasonmalicious.9dfe37
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/FakeSupport.CX
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.MSIL.FakeSupport.gen
BitDefenderGen:Variant.MSILPerseus.156775
MicroWorld-eScanGen:Variant.MSILPerseus.156775
TencentWin32.Trojan.Bp-ransomware.Ejqz
Ad-AwareGen:Variant.MSILPerseus.156775
SophosMal/Generic-S
ComodoMalware@#1rcar86c7edsb
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
FireEyeGen:Variant.MSILPerseus.156775
EmsisoftGen:Variant.MSILPerseus.156775 (B)
WebrootW32.Trojan.Locker
AviraTR/FakeSupport.dwwzu
MicrosoftTrojan:Win32/Wacatac.B!ml
AegisLabTrojan.Win32.Perseus.4!c
GDataGen:Variant.MSILPerseus.156775
McAfeeArtemis!A8682779DFE3
MalwarebytesMachineLearning/Anomalous.94%
PandaTrj/GdSda.A
IkarusTrojan.MSIL.Fakesupport
FortinetPossibleThreat
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.MSIL.FakeSupport?

Trojan.MSIL.FakeSupport removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment