Win32:FakeAV-DTZ [Trj] removal guide

The Win32:FakeAV-DTZ [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:FakeAV-DTZ [Trj] virus can do?

Authenticode signature is invalid

How to determine Win32:FakeAV-DTZ [Trj]?


File Info:
name: 9CA06FEB1E03AFB5194D.mlw
path: /opt/CAPEv2/storage/binaries/95cac9833fcc79ad35322dfb931d477db46bd50fa0f8b0f51694899acb8590b2
crc32: 38DA19C2
md5: 9ca06feb1e03afb5194d6623c5b5d2f6
sha1: b0cb6ad8ee5c511b148ab6d69a658ac48e4c1456
sha256: 95cac9833fcc79ad35322dfb931d477db46bd50fa0f8b0f51694899acb8590b2
sha512: 940193e3a423ed880a15dc63103f770cb8186d7c578b3a9f5575a8a474e9f3faf882c246f31cdf1562635ffbe01d01220c1287733cf9845616513b2d7f8a6164
ssdeep: 192:iPsk6VnHFOrcGL1rxMVbYPztYFyilMMASqIv9aSMDoNLNTq6+4gXSK+FFa3M9nlO:iPsRVnlUPL1i+tY0i+Cv9FzAShoC7z3Q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T108921A15DA52D07AE9D1C1F9C1E6C7AA826E4F312340B0C7E7F479975B680E2AA3142E
sha3_384: 517e55ea97107d9d9db16eda8484da676c6add472e9129d680dbc053588cfa825229659fe2bb843937eb11d346cb7302
ep_bytes: 558bec6aff68e0d14000682829400064
timestamp: 2012-08-10 06:53:53

Version Info:
0: [No Data]

Win32:FakeAV-DTZ [Trj] also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Mbro.lBtC
DrWeb	Trojan.Fakealert.32747
FireEye	Generic.mg.9ca06feb1e03afb5
McAfee	PWS-Zbot.gen.akj
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	TrojanPSW:Win32/FakeAV.6251a93e
Symantec	Trojan.Gen.MBT
TrendMicro-HouseCall	TROJ_GEN.R002H0CB822
NANO-Antivirus	Trojan.Win32.Fakealert.vgfia
Avast	Win32:FakeAV-DTZ [Trj]
Comodo	TrojWare.Win32.Kryptik.AJPQ@4q3n6n
Baidu	Win32.Trojan.Kryptik.od
VIPRE	Trojan.Win32.Winwebsec.ma (v)
McAfee-GW-Edition	PWS-Zbot.gen.akj
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.FakeAV
GData	Win32.Trojan.Agent.YBV9DG
Jiangmin	Trojan/SmartFortress2012.bzo
Gridinsoft	Ransom.Win32.Zbot.sa
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Cynet	Malicious (score: 100)
APEX	Malicious
Rising	Malware.XPACK!1.64E8 (CLOUD)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Zbot.AKJ!tr.pws
AVG	Win32:FakeAV-DTZ [Trj]
Cybereason	malicious.8ee5c5

How to remove Win32:FakeAV-DTZ [Trj]?

Win32:FakeAV-DTZ [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X