BAT/HostsChanger.A potentially unsafe (file analysis)

The BAT/HostsChanger.A potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BAT/HostsChanger.A potentially unsafe virus can do?

• Reads data out of its own binary image
• A process created a hidden window
• Unconventionial language used in binary resources: Russian
• Uses Windows utilities for basic functionality
• The sample wrote data to the system hosts file.
• Anomalous binary characteristics

How to determine BAT/HostsChanger.A potentially unsafe?

File Info:
crc32: 21C0E87D
md5: fdb94075cd45b5828c5645b65df42bb2
name: FDB94075CD45B5828C5645B65DF42BB2.mlw
sha1: ee080fa3bbf0513179627b4d1f1daca35461d032
sha256: 2abc20764b812903f81d1787f8c47165713582e587a8f099ddacfc041937410c
sha512: ffda0558b8d94d79aed0af7d523d73d0688c0f30a4cc278a348ca4caa642bc8f0db3255616e6a0b2734ce6f0b67c4438e53115c6870158df84ac269a49498981
ssdeep: 12288:LtLXhYSnzes1xJl62pgfmeUlHWDZQpT0js:L/YSzes1/kme4QZy0js
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: FireZzZ                                                                                             
FileDescription: Activator WF X10.xx Installation                            
FileVersion: X10.xx              
Comments: 
CompanyName: FireZzZ                                                     
Translation: 0x0409 0x04e4

BAT/HostsChanger.A potentially unsafe also known as:

How to remove BAT/HostsChanger.A potentially unsafe?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.