Fake Trojan

Should I remove “Win32/TrojanDownloader.FakeAlert.BMC”?

Malware Removal

The Win32/TrojanDownloader.FakeAlert.BMC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/TrojanDownloader.FakeAlert.BMC virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Win32/TrojanDownloader.FakeAlert.BMC?


File Info:

name: C9FA6AB05CF203F97C42.mlw
path: /opt/CAPEv2/storage/binaries/26d2d57a0cc5ae732e41e8eb841df11ef18d87c7bfac733b4b60dffbe5c7d414
crc32: 1AF9E76E
md5: c9fa6ab05cf203f97c423c40c44fbc93
sha1: 0986b7b39086194ba38c14d7f281213300c90316
sha256: 26d2d57a0cc5ae732e41e8eb841df11ef18d87c7bfac733b4b60dffbe5c7d414
sha512: 30925e9a66b5cd58ee20bf581abf9ca4332eafd3bd3e7ddde81c88554470d596da93b5cfc69eac37edac6dcb11c98f153c037f0084ea8c9f87cc4f397d1e0294
ssdeep: 3072:PKLjfseAXvgYbiCwRLqLKcn2xF0B7jGzlaJN:PKjfdAoXduLt2L0JCl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11134C04173522CA7D898B930324563830368CD7195A2A367F584BFAEBE906D4DCB8FD3
sha3_384: f8373ea71388f777214e52d22d342676424cb4b9f2f06b8c925f678015692e75dea93f12435ad4eefea7a34075895a08
ep_bytes: 558bec81ec24010000817d9444fd0000
timestamp: 2008-07-22 01:04:03

Version Info:

0: [No Data]

Win32/TrojanDownloader.FakeAlert.BMC also known as:

BkavW32.AIDetectMalware
DrWebTrojan.Packed.19696
McAfeePolyPatch-UPX
ZillyaDownloader.FakeAlert.Win32.18720
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 004bcce41 )
K7GWTrojan ( 004bcce41 )
Cybereasonmalicious.05cf20
BitDefenderThetaGen:NN.ZexaF.36318.pmW@aCPDeuai
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32Win32/TrojanDownloader.FakeAlert.BMC
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Dwn.ebxff
AvastWin32:dUmPeX [Susp]
F-SecureTrojan.TR/FakeAlert.NC
McAfee-GW-EditionBehavesLike.Win32.VirRansom.dz
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.c9fa6ab05cf203f9
SophosMal/EncPk-ABF
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Menti.fia
GoogleDetected
AviraTR/FakeAlert.NC
Antiy-AVLTrojan/Win32.Unknown
XcitiumMalCrypt.Indus!@1qrzi1
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftProgram:Win32/Wacapew.C!ml
CynetMalicious (score: 100)
Cylanceunsafe
PandaTrj/CI.A
RisingMalware.Undefined!8.C (TFE:4:F16uSEQdDLQ)
IkarusTrojan.Win32.FakeAV
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/FakeAV.MQ!tr
AVGWin32:dUmPeX [Susp]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Win32/TrojanDownloader.FakeAlert.BMC?

Win32/TrojanDownloader.FakeAlert.BMC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment