FakeGal

Posted: May 2, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	12,279
Threat Level:	2/10
Infected PCs:	1,885

First Seen:	May 2, 2012
Last Seen:	August 20, 2023
OS(es) Affected:	Windows

FakeGal is a rogue security program that displays the traditional characteristics of scamware, including creating fake security information regarding live attacks, infections by malicious software and other PC threats. Although FakeGal will attempt to procure money and related financial information by claiming that only its purchasable version can remove the PC threats that FakeGal (falsely) claims are on your computer, SpywareRemove.com malware researchers stress the fact that FakeGal has no genuine security-related functions and shouldn't be taken as a legitimate anti-malware product. Because fake security programs like FakeGal often include functions that actively attack your PC's security features or software, you should remove FakeGal from your computer with a proper anti-malware program once FakeGal is been detected.

FakeGal – Another Unnecessary Entry into the Annals of Rogue Security Software

FakeGal (also identified as Rogue:Win32/FakeGal, Trj/CI.A or TR/FakeAV.dim among various generic aliases) was first identified in mid-2011 as another rendition of security scamware. Unlike a legitimate anti-malware or security product, FakeGal can't detect real viruses, Trojans or other attacks against your PC, but FakeGal will repeatedly display misleading information to the contrary. Common types of 'cry wolf' warnings from FakeGal can include various pop-ups about infections, damaged applications or even unauthorized changes to your computer. Ultimately, SpywareRemove.com malware experts recommend that you use real anti-malware software to protect your PC and disregard FakeGal's fraudulent alerts. Other forms of fake security information may also be present, including imitation system scans that present fake results (such as large arrays of Trojans or viruses that, while legitimate PC threats when in evidence, are not actually on your PC).

Purchasing a FakeGal-based PC threat should never be done, even in cases where it seems to be the easiest way to remove FakeGal from your computer. Along with wasting money fruitlessly, giving your credit card or bank information to FakeGal-promoting criminals can quickly result in other fraudulent charges and similar attacks.

Why FakeGal is More Than Just a Series of Pop-Up-Based Irritants

Along with standard fake security features, FakeGal should also be considered a security risk due to its classification as a 'severe' threat by Microsoft. In particular, SpywareRemove.com malware research team warns to be on guard against the following prospective attacks whenever FakeGal or a similar rogue security program is installed:

Browser redirects to malicious sites, particularly fake search engines (to promote PPC fraud) or sites that promote variants of FakeGal. In some cases, PC security-based websites may also be blocked via similar methods.
Blocked access to other applications, particularly anti-malware or security programs that could delete FakeGal safely. This can often be resolved by finding a way to launch your OS without FakeGal launching, as well (via Safe Mode or a remote HD boot).
Security settings for your web browser and other baseline programs that are altered to make your computer vulnerable to additional attacks (such as by concealing Hidden files or allowing files with bad signatures to be downloaded without warnings).

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

byrhlmushdw.exe

File name: byrhlmushdw.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

systemcleaner.exe

File name: systemcleaner.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

somename.exe

File name: somename.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Windefend.exe

File name: Windefend.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

vlc-setup.exe

File name: vlc-setup.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Additional Information

The following URL's were detected:

wrfkjw.com