Categories: Malware

What is “AIT.Heur.Acapulco.20.139F0C98.Gen”?

The AIT.Heur.Acapulco.20.139F0C98.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT.Heur.Acapulco.20.139F0C98.Gen virus can do?

Reads data out of its own binary image
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

teftef2.servegame.com

How to determine AIT.Heur.Acapulco.20.139F0C98.Gen?


File Info:
crc32: C77332BBmd5: b0cba5c5c8fefa495ef9f213abc52251name: B0CBA5C5C8FEFA495EF9F213ABC52251.mlwsha1: 2c78ee686fc8a2a087eff0162d9b394600725f6asha256: 3c1d28660b03e922813a87d592a9692e759c6a6c6d25425494c37d4972e7a574sha512: aadc2917f265646903eef1c2812b2c1beb7cb838a493132988d17283da28f8e6ac1a1d69ae2ff119157cb1f72c1618826c5110c9a9457e7894867e4f0383ed09ssdeep: 6144:AWV6aVpn0Ytm/Guxvd1VSMZcvWD3sVnEh0Lckl3rp7yAoSu:Aqbh0B/9JcvWCnEOokl3NmAoSutype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 6, 0FileVersion: 3, 3, 6, 0FileDescription: Translation: 0x0809 0x04b0

AIT.Heur.Acapulco.20.139F0C98.Gen also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Autoit.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	AIT.Heur.Acapulco.20.139F0C98.Gen
Cylance	Unsafe
Alibaba	Trojan:Win32/Autoit.ali2000008
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.5c8fef
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Generik.CPSGEMQ
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.4710419-1
Kaspersky	Trojan-Ransom.Win32.Blocker.mnho
BitDefender	AIT.Heur.Acapulco.20.139F0C98.Gen
NANO-Antivirus	Trojan.Win32.Blocker.hfcpok
MicroWorld-eScan	AIT.Heur.Acapulco.20.139F0C98.Gen
Tencent	Win32.Trojan.Blocker.Pezj
Ad-Aware	AIT.Heur.Acapulco.20.139F0C98.Gen
Sophos	Mal/Generic-S
Comodo	Malware@#38nywz06kys92
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.PUPXER.dc
FireEye	AIT.Heur.Acapulco.20.139F0C98.Gen
Emsisoft	AIT.Heur.Acapulco.20.139F0C98.Gen (B)
Avira	WORM/AutoIt.AU
Microsoft	PWS:Win32/Zbot!ml
GData	AIT.Heur.Acapulco.20.139F0C98.Gen (3x)
AhnLab-V3	Malware/Win32.Generic.C4024472
McAfee	Artemis!B0CBA5C5C8FE
MAX	malware (ai score=89)
VBA32	Trojan-Downloader.Autoit.gen
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/CI.A
MaxSecure	Trojan.Malware.77058443.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml