Home Malware Programs Trojans Trojan.FakeHadoc

Trojan.FakeHadoc

Posted: January 7, 2011

Threat Metric

Threat Level: 8/10
Infected PCs: 3,230
First Seen: December 23, 2010
Last Seen: January 23, 2022
OS(es) Affected: Windows

Trojan.FakeHadoc is Microsoft's binary name for the fake system optimizer called HDD Doctor. This harmful rogue application's mission is to con computer user into purchasing useless software. Trojan.FakeHadoc seems to be a legitimate security application but actually has none of the abilities it advertises. Trojan.FakeHadoc does not offer protection to a PC, it is a malicious infection which may even cause permanent damage to the infected systems.

Trojan.FakeHadoc makes its way into the computer via illicit websites which are also browser hijackers. These domains redirect users to their homepage which serves as an advert for HDD Doctor. Trojan.FakeHadoc will then start spamming the user with various fake security notifications. These fake alerts must never be trusted. Remove Trojan.FakeHadoc using a reliable malware remover.

Aliases

W32/Delf.BR [Fortinet]Trojan/Win32.FakeAV [AhnLab-V3]Mal/Delf-BR [Sophos]TR/Agent.aqzo [AntiVir]Win32.TRAgent.Aqzo [eSafe]Win32:Adware-gen [Avast]Generic PUP.x!fw [McAfee]Generic4.AYKC [AVG]TR/FakeHadoc.A.10 [AntiVir]not-a-virus:FraudTool.Win32.HDDDoctor.e [Kaspersky]Win32.TRFakeHadoc.A [eSafe]Generic FakeAlert!lm [McAfee]Generic4.AYIX [AVG]TR/FakeHadoc.A.4 [AntiVir]MemScan:Trojan.Generic.5265304 [BitDefender]
More aliases (168)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\CLLDR.DLL File name: CLLDR.DLL
Size: 122.88 KB (122880 bytes)
MD5: d5a8c2f863a62d1daa7f56ee8b452ac8
Detection count: 96
File type: Dynamic link library
Mime Type: unknown/DLL
Path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\CLLDR.DLL
Group: Malware file
Last Updated: January 23, 2022
%ALLUSERSPROFILE%\Dati applicazioni\gTcXJXtqIE.exe File name: gTcXJXtqIE.exe
Size: 462.33 KB (462336 bytes)
MD5: 36cb96047149476a66f35c3d743769ac
Detection count: 87
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Dati applicazioni
Group: Malware file
Last Updated: December 28, 2010
C:\Users\<username>\AppData\Roaming\SecureBrowsing\LCL_FileProtect.exe.local.backup File name: LCL_FileProtect.exe.local.backup
Size: 733.18 KB (733184 bytes)
MD5: 6b5d72657acd639c0616c729ea7f4a8d
Detection count: 54
Mime Type: unknown/backup
Path: C:\Users\<username>\AppData\Roaming\SecureBrowsing\LCL_FileProtect.exe.local.backup
Group: Malware file
Last Updated: June 16, 2021
%WINDIR%\System32\jchodnpf.exe File name: jchodnpf.exe
Size: 64 KB (64000 bytes)
MD5: 81ef13a161f9827bc6cac97ff8512de4
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\System32
Group: Malware file
Last Updated: December 28, 2010
%WINDIR%\help\winhelp.exe File name: winhelp.exe
Size: 73.21 KB (73216 bytes)
MD5: 2eef6c598b97366e19b2bf1a5bce6681
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\help
Group: Malware file
Last Updated: December 28, 2010
%APPDATA%\Windowsupdate\svchost.exe File name: svchost.exe
Size: 565.24 KB (565248 bytes)
MD5: da27e8c9864b055b8cc4fc121d08a8b2
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Windowsupdate
Group: Malware file
Last Updated: December 28, 2010
%WINDIR%\system32\alem26\alemdz26.exe File name: alemdz26.exe
Size: 376.83 KB (376832 bytes)
MD5: 7dd2dca1ada5c9f2453add90180a2abe
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32\alem26
Group: Malware file
Last Updated: December 28, 2010
%APPDATA%\SecureBrowsing\LCL_FileProtect.exe File name: LCL_FileProtect.exe
Size: 733.18 KB (733184 bytes)
MD5: 1763276e2e63a1da53c9b9c448531f64
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\SecureBrowsing
Group: Malware file
Last Updated: March 26, 2016

More files

Additional Information

The following messages's were detected:
# Message
1"Confirmation
HDD doctor detected an error on your hard drive when trying to access a file
C:Program FilesInternet Exploreriexplore.exe
Perform data recovery now?"

"Disk Error
Can not find file: C:Program FilesMessengermsmsgs.exe
File may be deleted or corrupt.
It is strongly recommended to check the disk for errors."

"Serious system error
The system will reboot in 37 seconds
Windows can not continue operating due to fatal system error.
Windows was forced to restart.
All unsaved data will be lost."

"Confirmation
The system disk contains a large number of critical errors.
Windows could not fix most of them.
You can install install trial version of the third party software "HDD doctor" to fix found bugs.
Install "HDD doctor" now?"

"Can not find : xxxx
File may be deleted or corrupt.
Is is strongly recommanded to scan the disk for errors."

"Confirmation
Your hard drive contains a lot of critical errors!
All your data including installed programs, documents, email, etc. are at risk of irreversible corrupt.
The trial version does not have low-level access module needed to fix the errors found.
It is strongly recommended to activate the full version software with necessary modules. Activate full version now?"

One Comment

  • Al says:

    The virus will not allow me to access the Internet; it continually wants to restart my computer. Is there a way that I can download this program via another computer and start my infected computer with the disc in the drive to repair the infected computer?

Loading...