Fake • Trojan

Trojan:Win32/Fakecorr information

The Trojan:Win32/Fakecorr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Fakecorr virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Behavioural detection: Injection (inter-process)

How to determine Trojan:Win32/Fakecorr?


File Info:
name: 2DC80FD1478C19A8D7BE.mlw
path: /opt/CAPEv2/storage/binaries/0240d758044d786cd8036352cc23f407cd64c0bb4be44ab26432812f284a2a96
crc32: D18A34BF
md5: 2dc80fd1478c19a8d7be31233948f7f7
sha1: 009b69b5a324de00de872b9e3433b26b75d8783d
sha256: 0240d758044d786cd8036352cc23f407cd64c0bb4be44ab26432812f284a2a96
sha512: f24537f2fb0c55c55302c5aa79abf4b8993568f00464150fb99a9eaeb0e4cc36444c29402c0e2e15d2ee9ebabf5a20b89d0071847f04c1962fd4b9dcab1423db
ssdeep: 3072:8rDNlGM/wlmcj2fOYObL4DROvRNRz30D84Ax:OrGn2fF04DROvRfL3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T119D36B0275E780B2C8AE487A146C4B566F7FA6148AF18B431F561ACFEF222D1DF35306
sha3_384: 930eef28515b4d3a9e16b156bcac26b53b07415e493da6ad5fb0a2bf01e467a04fef7ada83508fb1ac6413105d9b832e
ep_bytes: 6a606890724000e8b2050000bf940000
timestamp: 2009-03-16 14:39:24

Version Info:
0: [No Data]

Trojan:Win32/Fakecorr also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Fixer.j!c
MicroWorld-eScan	Trojan.FakeAlert.AZO
FireEye	Generic.mg.2dc80fd1478c19a8
Skyhigh	Ransom-F.a
ALYac	Trojan.FakeAlert.AZO
Malwarebytes	Malware.AI.4205834918
Zillya	Trojan.Pincav.Win32.507
Sangfor	Suspicious.Win32.Save.ins
Alibaba	Ransom:Win32/Fixer.47b8c9ce
Cybereason	malicious.1478c1
Arcabit	Trojan.FakeAlert.AZO
VirIT	Trojan.Win32.Generic.FZX
Symantec	Trojan.Xrupter
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Adware.FileFixProfessional2009.A
Cynet	Malicious (score: 99)
McAfee	GenericRXAA-AA!2DC80FD1478C
ClamAV	Win.Trojan.Agent-194424
Kaspersky	Trojan-Ransom.Win32.Fixer.a
BitDefender	Trojan.FakeAlert.AZO
NANO-Antivirus	Trojan.Win32.Fixer.cqolke
Avast	Win32:Adware-gen [Adw]
Tencent	Malware.Win32.Gencirc.10be4ab6
TACHYON	Trojan-Clicker/W32.Fakealert.139264
Sophos	Troj/Fakecor-A
F-Secure	Trojan.TR/Ransom.Fixer.A.1
DrWeb	Trojan.Siggen3.42611
VIPRE	Trojan.FakeAlert.AZO
TrendMicro	TROJ_XRUPTER.D
Emsisoft	Trojan.FakeAlert.AZO (B)
Ikarus	PUA.FileFixProfessional2009
Jiangmin	Trojan/Fixer.c
Varist	W32/Renos!Generic
Avira	TR/Ransom.Fixer.A.1
Antiy-AVL	Trojan[Ransom]/Win32.Fixer
Kingsoft	Win32.Troj.Undef.a
Xcitium	Malware@#1h2r5owcvfld4
Microsoft	Trojan:Win32/Fakecorr
ViRobot	Spyware.Ransom.139264.A
ZoneAlarm	Trojan-Ransom.Win32.Fixer.a
GData	Trojan.FakeAlert.AZO
Google	Detected
BitDefenderTheta	AI:Packer.6CBE0D971F
MAX	malware (ai score=100)
VBA32	BScope.TrojanRansom.Fixer
Cylance	unsafe
Panda	Trj/Fixer
TrendMicro-HouseCall	TROJ_XRUPTER.D
Rising	Trojan.Fakecorr!8.B7C2 (TFE:5:XFJJtQHC8oP)
Yandex	Trojan.GenAsa!KYzpFItdcVk
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.1135762.susgen
Fortinet	W32/Fakecor.A!tr
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Ransomware:Win/FileFixProfessional2009.A

How to remove Trojan:Win32/Fakecorr?

Trojan:Win32/Fakecorr removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X