Malware

How to remove “AIT.Heur.Acapulco.11.DC9912C7.Gen”?

Malware Removal

The AIT.Heur.Acapulco.11.DC9912C7.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AIT.Heur.Acapulco.11.DC9912C7.Gen virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to modify proxy settings

Related domains:

a.uguu.se

How to determine AIT.Heur.Acapulco.11.DC9912C7.Gen?


File Info:

crc32: 5A5CF808
md5: bfa7da3001b0eec681ed06fba5c3a729
name: BFA7DA3001B0EEC681ED06FBA5C3A729.mlw
sha1: 1941b9bad9542f89197ce1a628c029eddf700179
sha256: 2c9f9b7441e5626155e10dfdd98926a04653454723069560bebe6d07a7d1d405
sha512: 92eb8209706945f13da06e877577afad29e0222dcc24913c0052d4b7585e75d6586be6605b63bafdc0879a4e08360cfdf1654fa10c4e42d079f4cf19050dc9bc
ssdeep: 6144:Y4XrK9PX7Fp6Gh2wWRGl0EDDf1PisZQ5rAGQwg1QtP1f4paaYlsdcaMJEdbI0Pz:HXe9PPlowWX0t6mOQwg1Qd15CcYk0We
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

Translation: 0x0809 0x04b0

AIT.Heur.Acapulco.11.DC9912C7.Gen also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
ALYacAIT.Heur.Acapulco.11.DC9912C7.Gen
CylanceUnsafe
SangforTrojan.Win32.Save.a
ESET-NOD32a variant of Win32/TrojanDownloader.Autoit.PEK
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
KasperskyUDS:Trojan-Spy.Win32.Noon
BitDefenderAIT.Heur.Acapulco.11.DC9912C7.Gen
MicroWorld-eScanAIT.Heur.Acapulco.11.DC9912C7.Gen
Ad-AwareAIT.Heur.Acapulco.11.DC9912C7.Gen
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
FireEyeGeneric.mg.bfa7da3001b0eec6
EmsisoftAIT.Heur.Acapulco.11.DC9912C7.Gen (B)
WebrootW32.Trojan.GenKD
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitAIT.Heur.Acapulco.11.DC9912C7.Gen
GDataAIT.Heur.Acapulco.11.DC9912C7.Gen (3x)
McAfeeArtemis!BFA7DA3001B0
MAXmalware (ai score=84)
IkarusWin32.Outbreak
AVGFileRepMalware

How to remove AIT.Heur.Acapulco.11.DC9912C7.Gen?

AIT.Heur.Acapulco.11.DC9912C7.Gen removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment