Fake

How to remove “Win32:FakeAlert-BAQ [Trj]”?

Malware Removal

The Win32:FakeAlert-BAQ [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:FakeAlert-BAQ [Trj] virus can do?

  • Authenticode signature is invalid

How to determine Win32:FakeAlert-BAQ [Trj]?


File Info:

name: E7271869342BC237115F.mlw
path: /opt/CAPEv2/storage/binaries/11f66b137f07996c816d514456f8685cb76f2048708d913d976e8e2d95861cd0
crc32: 9DD1D1B5
md5: e7271869342bc237115f796747d46d79
sha1: a835c97a1b0dfafae309f2d3d9199388a06a1307
sha256: 11f66b137f07996c816d514456f8685cb76f2048708d913d976e8e2d95861cd0
sha512: 1fefc8eb69074606033725a3d19a0058e05a1ca7b585af2df3bd7b107435e6585859d2cf6931cb949fff22d6618c26089fed19f0ae45977b7f2624a6ca1e9f5a
ssdeep: 3072:CqdkyfylWbZkh16fq2TVXVgvcXqUkZomWQHuf/UzaYpFPdbh+0X39xstZ:hdNEWbZkhMqIlgvcXqpZHuXQ39xstZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E8341843BADE4023C98500BEC9725BA693B392458C15E4169B882F6D5C70ECBD9F377E
sha3_384: 8551909e70eebe14e61496498d1d2f2b0d2ee63beacd4dccc5ac80c378b8c7c20c3de4386e04d892dc07eac6c98518e3
ep_bytes: 558bec6aff68285743006850fa420064
timestamp: 2010-09-21 14:51:31

Version Info:

0: [No Data]

Win32:FakeAlert-BAQ [Trj] also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.CodecPack.lyBC
MicroWorld-eScanGen:Variant.Babar.72700
FireEyeGeneric.mg.e7271869342bc237
CAT-QuickHealTrojanDownloader.Renos
ALYacGen:Variant.Babar.72700
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Babar.72700
SangforSuspicious.Win32.Save.ins
K7AntiVirusTrojan-Downloader ( 0011d74b1 )
AlibabaTrojanDownloader:Win32/Renos.6d16667e
K7GWTrojan-Downloader ( 0011d74b1 )
Cybereasonmalicious.a1b0df
CyrenW32/FakeAlert.MK.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanDownloader.FakeAlert.AQI
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Babar.72700
NANO-AntivirusTrojan.Win32.FakeAlert.jqajjl
AvastWin32:FakeAlert-BAQ [Trj]
TencentMalware.Win32.Gencirc.115dba69
SophosMal/FakeAV-JV
F-SecureTrojan.TR/ATRAPS.Gen2
DrWebTrojan.DownLoader1.22680
TrendMicroTROJ_GEN.R002C0DH223
McAfee-GW-EditionBehavesLike.Win32.Injector.dh
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Babar.72700 (B)
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Babar.72700
GoogleDetected
AviraTR/ATRAPS.Gen2
Antiy-AVLTrojan[Downloader]/Win32.Renos
ArcabitTrojan.Babar.D11BFC
ViRobotTrojan.Win.Z.Fakealert.234496.D
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojanDownloader:Win32/Renos.LX
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Mdob.R510803
McAfeeArtemis!E7271869342B
MAXmalware (ai score=89)
VBA32suspected of Trojan.Downloader.gen
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DH223
RisingDownloader.FakeAlert!8.4FF (TFE:5:xxIOlHXKu8M)
IkarusTrojan-Downloader.Win32.FakeAlert
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/FakeAlert.AQI!tr
BitDefenderThetaGen:NN.ZexaF.36348.omW@amFRRcl
AVGWin32:FakeAlert-BAQ [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Win32:FakeAlert-BAQ [Trj]?

Win32:FakeAlert-BAQ [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment