Categories: Malware

Exploit.Android.MempoDroid.A removal instruction

The Exploit.Android.MempoDroid.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Exploit.Android.MempoDroid.A virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Exploit.Android.MempoDroid.A?


File Info:
name: C5EB6B4B4EFAC0635690.mlwpath: /opt/CAPEv2/storage/binaries/ce05cb0f9b0fc9f12e40214a47be3d7be5544586e5808af0250a6e6f676cad79crc32: 8CB76751md5: c5eb6b4b4efac0635690ca8643f400d3sha1: ca92f441eaa4f7ffe0d432c33455ad54d5580a33sha256: ce05cb0f9b0fc9f12e40214a47be3d7be5544586e5808af0250a6e6f676cad79sha512: e76abae42d738f55bd880c68d06dd2536670156e9f03e9f4dfb45ab829d72190f1d90a7f319cb8a3f67ee3e446b25f61d5a721263647236cfa230d521d653e31ssdeep: 24576:SEgTqCjZHIB7FlzshOCoPaNSdxhmygvevjT4f2ACTcooSrXqeEVtQ:JYNHIB7PIhOCoPaIdxh3gve/OH3SueEstype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19965E122F5D28077C6A262718E7EF76A963D7D3A0323DA9F37C42C215EB0541661A372sha3_384: 3055a19d7dd1806c2eebc3208ebf36f0a36959b06cbde0c6995bd8274e076aabbd54c21b5f81d4182325d7f8612991dfep_bytes: e8eac20000e989feffffcccccccccccctimestamp: 2012-04-22 23:25:13
Version Info:
FileVersion: 3.3.9.5Comments: 华为P1/D1 root程序FileDescription: 华为P1/D1 root程序LegalCopyright: 格诺 Genokolar@gmail.comTranslation: 0x0804 0x04b0

Exploit.Android.MempoDroid.A also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Pasta.tnm5
MicroWorld-eScan	Exploit.Android.MempoDroid.A
FireEye	Generic.mg.c5eb6b4b4efac063
ALYac	Exploit.Android.MempoDroid.A
Cylance	Unsafe
VirIT	Trojan.Win32.Generic.PFE
APEX	Malicious
ClamAV	Win.Malware.Autoit-6753917-0
BitDefender	Exploit.Android.MempoDroid.A
Ad-Aware	Exploit.Android.MempoDroid.A
Emsisoft	Exploit.Android.MempoDroid.A (B)
Comodo	Malware@#2g9nb5c3wtsdn
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Worm.tc
Sophos	Mal/Generic-R + Andr/DroidRt-J
Ikarus	Trojan.Strictor
GData	Exploit.Android.MempoDroid.A (2x)
Jiangmin	Exploit.AndroidOS.aib
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Wacatac.sa
ViRobot	Trojan.Win32.A.Agent.408279
Microsoft	Trojan:Script/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!C5EB6B4B4EFA
Malwarebytes	Malware.AI.4176712969
TrendMicro-HouseCall	TROJ_GEN.R002H09LB21
Webroot	W32.Malware.Gen
Cybereason	malicious.b4efac