FakeAlert-KS.gen.e

By JubileeX in Trojans

Threat Scorecard

Threat Level:	90 % (High)
Infected Computers:	5

First Seen:	August 29, 2011
Last Seen:	November 5, 2022
OS(es) Affected:	Windows

FakeAlert-KS.gen.e is a hazardous Trojan infection that enables Internet attackers to get remote access to the compromised computer system. FakeAlert-KS.gen.e is able to steal your sensitive details and transmit them to remote attackers. FakeAlert-KS.gen.e will make changes to the system settings in a try to damage your PC. FakeAlert-KS.gen.e also download and install malicious files by connecting to a remote server secretly. You should uninstall FakeAlert-KS.gen.e as soon as possible to keep your computer safe.

File System Details

FakeAlert-KS.gen.e may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%System%\smss32.exe
Name: %System%\smss32.exe Type: Executable File Group: Malware file
2.	%System%\wsnpoem\audio.dll
Name: %System%\wsnpoem\audio.dll Type: Dynamic link library Group: Malware file
3.	%System%\41.exe
Name: %System%\41.exe Type: Executable File Group: Malware file
4.	%System%\winlogon32.exe
Name: %System%\winlogon32.exe Type: Executable File Group: Malware file
5.	%DesktopDir%\Internet Security 2010.lnk
Name: %DesktopDir%\Internet Security 2010.lnk Type: Shortcut Group: Malware file
6.	c:\14.tmp
Name: c:\14.tmp Type: Temporary File Group: Malware file
7.	%Windir%\Temp\Temporary Internet
Name: %Windir%\Temp\Temporary Internet Group: Malware file
8.	%AppData%\avdrn.dat
Name: %AppData%\avdrn.dat Type: Data file Group: Malware file
9.	c:\12.tmp
Name: c:\12.tmp Type: Temporary File Group: Malware file
10.	%Windir%\Temp\Temporary Internet Files\Content.IE5\MDE3KROJ\in[1].txt
Name: %Windir%\Temp\Temporary Internet Files\Content.IE5\MDE3KROJ\in[1].txt Group: Malware file
11.	%System%\lowsec\user.ds
Name: %System%\lowsec\user.ds Group: Malware file
12.	%Profiles%\LocalService\Application Data\mvhgkr.dat
Name: %Profiles%\LocalService\Application Data\mvhgkr.dat Type: Data file Group: Malware file
13.	%Temp%\dfgdgdfgrgdgfdrdfs.tmp
Name: %Temp%\dfgdgdfgrgdgfdrdfs.tmp Type: Temporary File Group: Malware file
14.	%Windir%\Temp\hsf78w3uhduf8w.tmp
Name: %Windir%\Temp\hsf78w3uhduf8w.tmp Type: Temporary File Group: Malware file
15.	Files\Content.IE5\499JDBB1\regiondata[2].aspx
Name: Files\Content.IE5\499JDBB1\regiondata[2].aspx Group: Malware file

Registry Details

FakeAlert-KS.gen.e may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop NoChangingWallpaper = 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5BF49A2-94F1-42BD-F434-3604812C807D}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5BF49A2-94F1-42BD-F434-3604812C807D} (Default) = "%System%\x5i4y0v55p.dll" ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT

HKEY_USERS\.DEFAULT\Software\Microsoft\Protected Storage System Provider

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run reader_s = "%System%\reader_s.exe" smss32.exe = "%System%\smss32.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5BF49A2-94F1-42BD-F434-3604812C807D}\InProcServer32 (Default) = "%System%\x5i4y0v55p.dll" ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer NoSetActiveDesktop = 0x00000001 NoActiveDesktopChanges = 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\AGProtect

HKEY_CURRENT_USER\Software\IS2010

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5BF49A2-94F1-42BD-F434-3604812C807D}\InProcServer32

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

FakeAlert-KS.gen.e

Threat Scorecard

EnigmaSoft Threat Scorecard

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen