Trojan

Trojan.Win32.Fabookie.ck removal instruction

Malware Removal

The Trojan.Win32.Fabookie.ck is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Fabookie.ck virus can do?

  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Steals private information from local Internet browsers
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

How to determine Trojan.Win32.Fabookie.ck?


File Info:

crc32: 9F8ABCEB
md5: 6eb11de75fac40627ef6e93efb0482df
name: 6EB11DE75FAC40627EF6E93EFB0482DF.mlw
sha1: 147e6767071ac4f09b3eefa7ae62b29e5785ccae
sha256: 8650cbdd1c6fe261f7329a9564200ebb0e347ed75f1576e60612c8ac710166cb
sha512: 3ddc98bae377ec51b7c8c0fa3a053ec84937519391bffc72520c5d9edfeaa46c9bce3507c50955bf281cbbdf24679e56aa3c8dd563ed5825ba2a4b702d556567
ssdeep: 98304:L8uYQz3ZIa9CyDdHp3ZjeJTBmnPgXSuJ1rxFBwgNRZ4GF:YupHoyHiBfPugNbnF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.Fabookie.ck also known as:

BkavHW32.Packed.
K7AntiVirusTrojan ( 003e21f71 )
CynetMalicious (score: 100)
McAfeeArtemis!6EB11DE75FAC
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Fabookie.71e87226
Cybereasonmalicious.7071ac
CyrenW32/Trojan.XLVI-3192
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent.UAW
APEXMalicious
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.34047267
KasperskyTrojan.Win32.Fabookie.ck
BitDefenderTrojan.GenericKD.34047267
ViRobotTrojan.Win32.Z.Agent.4114944
MicroWorld-eScanTrojan.GenericKD.34047267
TencentWin32.Trojan.Fabookie.Wtdx
Ad-AwareTrojan.GenericKD.34047267
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.XPACK.Gen
BitDefenderThetaGen:NN.ZexaF.34128.7FW@a4ddgNoj
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.6eb11de75fac4062
EmsisoftTrojan.GenericKD.34047267 (B)
SentinelOneDFI – Malicious PE
Endgamemalicious (high confidence)
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Win32.Fabookie
MicrosoftTrojan:Win32/Occamy.C86
ArcabitTrojan.Generic.D2078523
ZoneAlarmTrojan.Win32.Fabookie.ck
MAXmalware (ai score=85)
MalwarebytesTrojan.MalPack.VMP
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002H0CFJ20
RisingTrojan.Agent!8.B1E (CLOUD)
IkarusTrojan.Win32.Agent
FortinetW32/Agent.UAW!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.BO.3f4

How to remove Trojan.Win32.Fabookie.ck?

Trojan.Win32.Fabookie.ck removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment