What is "Application.Downloader.ANS"?

The Application.Downloader.ANS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Downloader.ANS virus can do?

Executable code extraction
Creates RWX memory
Collects information about installed applications
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

uxqa-ui.ru

How to determine Application.Downloader.ANS?


File Info:
crc32: 00B3C94E
md5: 6cb6bfddd2e2631782cf5dcf262b65e3
name: 6CB6BFDDD2E2631782CF5DCF262B65E3.mlw
sha1: f3d655c28e18be1860a3ab35bdc5c53b18d1e159
sha256: 237ec61cd695fb411ff68b967741c15259f4b3c35d057cabbb5921af8e6b2850
sha512: aeda33966d27928dfaa2fcc57bf61c6918aaf704b4183dea8cfcf76d95257b9afafdc18bed926c666a7a8d932ab9fadbbbdad7dcf12b149184a2e737a291fe14
ssdeep: 98304:BWWe3uOEYzJI1RcWpTCFrQBXKzLo/0+AzhGgIaR:kR3uvYzJI1RcOTCrQBX6KAzhGdc
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9Etarisoanet ruersie 
InternalName: DIEDEG.EXE
FileVersion: 2.8.5.4
CompanyName: xa9Etarisoanet ruersie 
ProductName: DIEDEG
ProductVersion: 2.8.5.4
OriginalFilename: diedeg.exe
Translation: 0x0409 0x04e4

Application.Downloader.ANS also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0052ffa71 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Zadved.936
Cynet	Malicious (score: 100)
CAT-QuickHeal	PUA.GenericPMF.S4847830
ALYac	Application.Downloader.ANS
Zillya	Trojan.Kryptik.Win32.1409865
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 0052ffa71 )
Cybereason	malicious.dd2e26
Cyren	W32/S-65f31d20!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.GGIK
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.DownloadHelper.gen
BitDefender	Application.Downloader.ANS
NANO-Antivirus	Trojan.Win32.Snojan.fbbzic
MicroWorld-eScan	Application.Downloader.ANS
Tencent	Malware.Win32.Gencirc.114cfd0e
Ad-Aware	Application.Downloader.ANS
Sophos	Generic PUA PD (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34294.@t0@aeKWXcni
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.vh
FireEye	Generic.mg.6cb6bfddd2e26317
Emsisoft	Application.Downloader.ANS (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Downloader.Snojan.alj
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.25F975D
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Application.Downloader.ANS
AhnLab-V3	PUP/Win32.LoadMoney.R227064
Acronis	suspicious
McAfee	PUP-XFI-TF
MAX	malware (ai score=96)
VBA32	BScope.Downloader.Snojan
Panda	Trj/GdSda.A
Rising	Adware.Adload!1.B2A5 (CLASSIC)
Yandex	Trojan.GenAsa!Kd8h4RgVbgQ
Ikarus	PUA.Win32.Dlhelper
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.GDTD!tr
AVG	Win32:Adware-gen [Adw]

How to remove Application.Downloader.ANS?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Application.Downloader.ANS”?