Trojan.FakeHadoc

By Domesticus in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	1,379

First Seen:	December 23, 2010
Last Seen:	January 23, 2022
OS(es) Affected:	Windows

Trojan.FakeHadoc is a Trojan that installs and executes the rogue HDD Doctor onto users' computers. On successful execution of the rogue, Trojan.FakeHadoc will generate false security reports claiming to detect hard drive and memory errors. Then the victim will be pressurized into purchasing the "full version" of HDD Doctor in order to fix the errors. Trojan.FakeHadoc will also disable programs and processes such as Task Manager, Registry Editor, Internet Explorer and more. Purchasing HDD Doctor will not help fix any of your computer issues; instead employ a reliable and legitimate anti-spyware application to remove these threats from your PC.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Fortinet	W32/Delf.BR
AhnLab-V3	Trojan/Win32.FakeAV
Sophos	Mal/Delf-BR
AntiVir	TR/Agent.aqzo
eSafe	Win32.TRAgent.Aqzo
Avast	Win32:Adware-gen
McAfee	Generic PUP.x!fw
AVG	Generic4.AYKC
AntiVir	TR/FakeHadoc.A.10
Kaspersky	not-a-virus:FraudTool.Win32.HDDDoctor.e
eSafe	Win32.TRFakeHadoc.A
McAfee	Generic FakeAlert!lm
AVG	Generic4.AYIX
AntiVir	TR/FakeHadoc.A.4
BitDefender	MemScan:Trojan.Generic.5265304

SpyHunter Detects & Remove Trojan.FakeHadoc

File System Details

Trojan.FakeHadoc may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	LCL_FileProtect.exe	300d9100be702c56444b9d26cbb0ff63	40
Name: LCL_FileProtect.exe MD5: 300d9100be702c56444b9d26cbb0ff63 Size: 737.28 KB (737280 bytes) Detections: 40 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: September 25, 2018
2.	LCL_FileProtect.exe	4fa122a6e3de3409e5fdae0ba54de68b	22
Name: LCL_FileProtect.exe MD5: 4fa122a6e3de3409e5fdae0ba54de68b Size: 733.18 KB (733184 bytes) Detections: 22 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
3.	LCL_FileProtect.exe	fd94921717478c7d8900bd8b6ff3bf5a	18
Name: LCL_FileProtect.exe MD5: fd94921717478c7d8900bd8b6ff3bf5a Size: 733.18 KB (733184 bytes) Detections: 18 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
4.	LCL_FileProtect.exe	455faf6fcb56c62efcebde3c040a0976	14
Name: LCL_FileProtect.exe MD5: 455faf6fcb56c62efcebde3c040a0976 Size: 759.29 KB (759296 bytes) Detections: 14 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
5.	LCL_FileProtect.exe	bb9fc11a181ebef5b37ec2f6c3875b75	8
Name: LCL_FileProtect.exe MD5: bb9fc11a181ebef5b37ec2f6c3875b75 Size: 733.18 KB (733184 bytes) Detections: 8 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
6.	LCL_FileProtect.exe	ad4f350a9710d26f43042156325768b5	5
Name: LCL_FileProtect.exe MD5: ad4f350a9710d26f43042156325768b5 Size: 733.18 KB (733184 bytes) Detections: 5 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 11, 2020
7.	LCL_FileProtect.exe	b35ae394e115556a234d6cf9bdb515df	4
Name: LCL_FileProtect.exe MD5: b35ae394e115556a234d6cf9bdb515df Size: 733.18 KB (733184 bytes) Detections: 4 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
8.	LCL_FileProtect.exe	8830d968e682a13e18baae289b36e1cc	4
Name: LCL_FileProtect.exe MD5: 8830d968e682a13e18baae289b36e1cc Size: 131.07 KB (131072 bytes) Detections: 4 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: November 26, 2022
9.	LCL_FileProtect.exe	ea7c4d0e60131853631c8e5ae48c2599	4
Name: LCL_FileProtect.exe MD5: ea7c4d0e60131853631c8e5ae48c2599 Size: 733.18 KB (733184 bytes) Detections: 4 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
10.	LCL_FileProtect.exe	1fee8d8bb9379337a17f9d5043a870ad	4
Name: LCL_FileProtect.exe MD5: 1fee8d8bb9379337a17f9d5043a870ad Size: 733.18 KB (733184 bytes) Detections: 4 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
11.	LCL_FileProtect.exe	9fe0fee141541b3a2aab413efc501dc1	3
Name: LCL_FileProtect.exe MD5: 9fe0fee141541b3a2aab413efc501dc1 Size: 737.28 KB (737280 bytes) Detections: 3 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
12.	LCL_FileProtect.exe	ecab349f03651a4f076def217788b3c0	2
Name: LCL_FileProtect.exe MD5: ecab349f03651a4f076def217788b3c0 Size: 733.18 KB (733184 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
13.	LCL_FileProtect.exe	a6c32626285ced542aef8a2aa4e5242b	2
Name: LCL_FileProtect.exe MD5: a6c32626285ced542aef8a2aa4e5242b Size: 760.83 KB (760832 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
14.	LCL_FileProtect.exe	67f748298a32ec47d52514eca18529fa	2
Name: LCL_FileProtect.exe MD5: 67f748298a32ec47d52514eca18529fa Size: 734.72 KB (734720 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
15.	LCL_FileProtect.exe	02170c4b51de118ad3724cb542ec60d9	2
Name: LCL_FileProtect.exe MD5: 02170c4b51de118ad3724cb542ec60d9 Size: 733.18 KB (733184 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
16.	LCL_FileProtect.exe	50511b824f02456a154a2ed7ed32d7da	2
Name: LCL_FileProtect.exe MD5: 50511b824f02456a154a2ed7ed32d7da Size: 1.04 MB (1040384 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: December 23, 2019
17.	LCL_FileProtect.exe	1763276e2e63a1da53c9b9c448531f64	2
Name: LCL_FileProtect.exe MD5: 1763276e2e63a1da53c9b9c448531f64 Size: 733.18 KB (733184 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
18.	LCL_FileProtect.exe	a973f47b0c0dc6a95cb1c1f3b6ad058c	1
Name: LCL_FileProtect.exe MD5: a973f47b0c0dc6a95cb1c1f3b6ad058c Size: 811 KB (811008 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
19.	LCL_FileProtect.exe	3ef149c658b89443b6b2d61312d2d6b2	1
Name: LCL_FileProtect.exe MD5: 3ef149c658b89443b6b2d61312d2d6b2 Size: 733.18 KB (733184 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
20.	LCL_FileProtect.exe	5669aa0c137b2bee6995d66e0b1f7c43	1
Name: LCL_FileProtect.exe MD5: 5669aa0c137b2bee6995d66e0b1f7c43 Size: 733.18 KB (733184 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
21.	LCL_FileProtect.exe	8223af16f78c45413976954152a8a7c6	1
Name: LCL_FileProtect.exe MD5: 8223af16f78c45413976954152a8a7c6 Size: 811 KB (811008 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
22.	LCL_FileProtect.exe	8e716248bb56f7ab7997e3206a4b141b	1
Name: LCL_FileProtect.exe MD5: 8e716248bb56f7ab7997e3206a4b141b Size: 870.14 KB (870144 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
23.	LCL_FileProtect.exe	0e95707ccc48e3b00d28ce6d4205aa5e	1
Name: LCL_FileProtect.exe MD5: 0e95707ccc48e3b00d28ce6d4205aa5e Size: 733.18 KB (733184 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
24.	LCL_FileProtect.exe	2d3bb8de3e684a53e96866ee2dbef7e0	1
Name: LCL_FileProtect.exe MD5: 2d3bb8de3e684a53e96866ee2dbef7e0 Size: 733.18 KB (733184 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
25.	LCL_FileProtect.exe	1792c1f81eb70d85ac3bc08d8a57bc0a	1
Name: LCL_FileProtect.exe MD5: 1792c1f81eb70d85ac3bc08d8a57bc0a Size: 802.81 KB (802816 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
26.	LCL_FileProtect.exe	39515fd4c5163962ff66b87e03781135	1
Name: LCL_FileProtect.exe MD5: 39515fd4c5163962ff66b87e03781135 Size: 733.18 KB (733184 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016
27.	LCL_FileProtect.exe	d0bad5686b698bf5c2ae690b4c2b071d	1
Name: LCL_FileProtect.exe MD5: d0bad5686b698bf5c2ae690b4c2b071d Size: 946.17 KB (946176 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SecureBrowsing Group: Malware file Last Updated: March 26, 2016

More files

Messages

The following messages associated with Trojan.FakeHadoc were found:

"Confirmation
HDD doctor detected an error on your hard drive when trying to access a file
C:Program FilesInternet Exploreriexplore.exe
Perform data recovery now?"

"Disk Error
Can not find file: C:Program FilesMessengermsmsgs.exe
File may be deleted or corrupt.
It is strongly recommended to check the disk for errors."

"Serious system error
The system will reboot in 37 seconds
Windows can not continue operating due to fatal system error.
Windows was forced to restart.
All unsaved data will be lost."

"Confirmation
The system disk contains a large number of critical errors.
Windows could not fix most of them.
You can install install trial version of the third party software "HDD doctor" to fix found bugs.
Install "HDD doctor" now?"

"Can not find : xxxx
File may be deleted or corrupt.
Is is strongly recommanded to scan the disk for errors."

"Confirmation
Your hard drive contains a lot of critical errors!
All your data including installed programs, documents, email, etc. are at risk of irreversible corrupt.
The trial version does not have low-level access module needed to fix the errors found.
It is strongly recommended to activate the full version software with necessary modules. Activate full version now?"

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.FakeHadoc

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Trojan.FakeHadoc

File System Details

Messages

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen