What is “Win32:FakeAV-FKV [Trj]”?

The Win32:FakeAV-FKV [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:FakeAV-FKV [Trj] virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32:FakeAV-FKV [Trj]?


File Info:
name: 7263E8A3578DA1645B90.mlw
path: /opt/CAPEv2/storage/binaries/39e6af7720574063fad3801aa7ea09cde152cc4e599fdbb169467be4022b1188
crc32: 9EB93244
md5: 7263e8a3578da1645b909becafcdbf08
sha1: 7930a5312a7eeed3c5a44bd3d3f53793674d4786
sha256: 39e6af7720574063fad3801aa7ea09cde152cc4e599fdbb169467be4022b1188
sha512: 08a49ca166f68b5f0cd0fe9822dd6f391b938c7e7387e3d9d9a4832155e5047c98f4f29ba07b0fc2929507e037c333ab881c292cbdd1ed8c7bfec94767e206dc
ssdeep: 6144:8v4BR7FNrT5NF6YJ9H5Q/IxH0eDuun/vDIKI:8v4B/Nr9Np5QAN0ZmIf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13E4402B3298164D8EDDF85B2FBFD840AA6B940790B861507926D3DD1EAF0D7F3532422
sha3_384: 0df2167dfc7dd79080b2b1741f2543de8b754a3ec7b51cba9ed7ce255836dccfa3711e33c00739718000d04ee0e9c89e
ep_bytes: 558bec6aff68a0674400687828400064
timestamp: 2012-06-29 08:25:14

Version Info:
0: [No Data]

Win32:FakeAV-FKV [Trj] also known as:

Bkav	W32.AIDetect.malware1
Cynet	Malicious (score: 100)
FireEye	Generic.mg.7263e8a3578da164
CAT-QuickHeal	FraudTool.Security
McAfee	FakeAV-SecurityTool.ev
Zillya	Trojan.FakeAV.Win32.205812
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 003be3771 )
K7GW	Trojan ( 003be3771 )
CrowdStrike	win/malicious_confidence_90% (W)
Baidu	Win32.Trojan.Kryptik.atb
VirIT	FraudTool.Win32.Generic.W
Cyren	W32/FraudLoad.F33_DET!Eldorado
Symantec	Trojan.FakeAV!gen92
APEX	Malicious
NANO-Antivirus	Trojan.Win32.Fakealert.crlgle
Avast	Win32:FakeAV-FKV [Trj]
Sophos	Generic ML PUA (PUA)
Comodo	TrojWare.Win32.Kryptik.AHSJ@4phrbo
DrWeb	Trojan.Fakealert.32185
VIPRE	Trojan.Win32.FakeAV.klm (v)
McAfee-GW-Edition	FakeAV-SecurityTool.ev
Ikarus	Trojan.Win32.FakeAV
GData	Win32.Trojan.Agent.76EQ0X
Jiangmin	Trojan/Agent.ganu
Avira	TR/Winwebsec.axcbb
Antiy-AVL	Trojan/Generic.ASMalwS.561813
ViRobot	Trojan.Win32.A.Agent.405504.AP
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Rising	Malware.Heuristic!ET#89% (RDMK:cmRtazpS2cAACQw/nzQRGaa2agKM)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/FakeAV_SecurityTool.EV!tr
AVG	Win32:FakeAV-FKV [Trj]
Cybereason	malicious.12a7ee

How to remove Win32:FakeAV-FKV [Trj]?

Win32:FakeAV-FKV [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X