Remove Trojan.Fakealert

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home / Spyware Encyclopedia / Trojan.Fakealert

Trojan.Fakealert Technical Details

Category

Trojan

Discovered

9/29/2006 16:36:00 PM

Modified

5/9/2008 13:25:00 PM

Threat Level

High

Description

A destructive program that masquerades as a benign application. Unlike viruses, Trojan horses do not replicate themselves but they can be just as destructive. One of the most insidious types of Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer.

Summary

the hosts file was updated with the following url-to-ip mappings : n/a
the following http urls were started :
search.live.com
creatonsoft.com
protectionstack.com
generated smtp traffic : n/a
there was a new connection established with a remote irc server : n/a
the following hidden entries created :
hidden file: , worm c:\winsecureav\avquar
the following internet connection was established:
202.47.29.30:80
manual winsecureav installed

When the Trojan is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\mcrupdate.exe			4471CF6A831AE9CD94D65AB64E5081B5
..\printer.exe			d09ff86dbabd5ccd48562607701bc577	9728
..\temp\g3-tmp_.exe			af017af89f583489325626e01d249d8d	410112
..\setup.exe			93f5efbb50f7aefb9b9fefd39cb85061
..\us10039.exe			028e3956557b5df8363fe65554535681	9728
..\0d4006fb.dll			e06947189250e210d45b5c91ac67eda1	59356
..\bubbj.dll			eb4c66df3d7be479900bdce5a491a105
..\center1.exe			86a50af27b07445e55428bc2e321b34f	39302
..\center2.exe	1.0.0.1		5d2bcf06c65613a0f62e90f6a5ee08d3	31094
..\flirek.dll			3b8d86aa41dc77970f523928f673123e	12800
..\gdjri32.dll			f6f371281d43778726a5621fd39a4a25	7152
..\gdjzi32.dll			1bb974b36a1db32ff151d68942fe23d4
..\gdrxjhi32.dll			d8fd7816487e4bf2c9902f3369d06e8d	10598
..\gdwdi32.dll			9cd7a09b80b697122844af5e742f3146
..\lwinupdate.exe	1.0.0.15	microsoft	03671935826d7cbed96bd4a2a0904036	20488
..\mcrupdate.exe
..\nczupfw.dll			d0615ec6547926e5ece30d4ef3b092cd
..\printer.exe			d09ff86dbabd5ccd48562607701bc577	9728
..\prrbpgbr.sys			0680d8dabcb06e4751dba5dddeda4975	4
..\win321.exe			988903c26673670e18c38d84a5a14ce1	6176
..\windefend.exe	5.1.2600.2180	microsoft corporation	ff1aae931ac2231f92365399100ee129	15941
..\ymmzwd.dll			9636e2ce404d4f5d6328c157b16b5475
..\emotigt.dll	1.0.0.1		d667e5d637594a6244c797f0aa1c8434	200704

When the Trojan is executed, it creates the following Registry entries:

•	..\software\1ig0ahjwtu
•	..\software\fwbd
•	..\software\hollol
•	..\software\inet delivery
•	..\software\invictus
•	..\software\microsoft\windows\currentversion\uninstall\golden palace casino new
•	..\software\microsoft\windows\currentversion\uninstall\inet delivery
•	..\software\microsoft\windows\currentversion\uninstall\mslagent
•	..\software\mwc
•	..\software\classes\appid\powervideo.dll
•	..\software\classes\bonsws.stockbar
•	..\software\classes\bonsws.toolbar.1
•	..\software\classes\clsid\{075a465d-0af2-4b79-8db3-2fda0fd8d74c}
•	..\software\classes\clsid\{1817ab5d-25bf-4d5e-ba90-6e5fe658fc5f}
•	..\software\classes\clsid\{422ca3af-86f1-4607-88e2-bbbd4e9371eb}
•	..\software\classes\clsid\{66e72884-4fd2-464f-a6b8-468f31c40e36}
•	..\software\classes\clsid\{72b445fa-2456-4718-8580-3d963e4ccb5a}
•	..\software\classes\clsid\{85b2f289-7128-4c5a-a330-f9fc01432d3a}
•	..\software\classes\clsid\{a2f12137-1918-4f31-b179-94c21a1e2bc2}
•	..\software\classes\clsid\{a6d478c6-7961-4fe9-be4b-e621dd640112}
•	..\software\classes\clsid\{b585105c-0e84-4ef0-9c6a-fbe134a72945}
•	..\software\classes\clsid\{de5ede53-9db0-422d-b32d-5c41c96d6f52}
•	..\software\classes\clsid\{ecae8c4f-ecf2-400a-a6c2-3ca794c3fc12}
•	..\software\classes\emotigt.bkwr
•	..\software\classes\emotigt.toolbar.1

Recommendation to remove Trojan.Fakealert

Spyware Detector can remove Trojan.Fakealert, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat