Rootkit

About “Rootkit.51326” infection

Malware Removal

The Rootkit.51326 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Rootkit.51326 virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Rootkit.51326?


File Info:

crc32: 5A0737D0
md5: ec6ec770da58f265dc5c831a9f6309a0
name: EC6EC770DA58F265DC5C831A9F6309A0.mlw
sha1: 4291e5073b0265a01671f732c7b4bca7d59f242b
sha256: cffe0cc6215c17dc8c1a264ca12b9d59767b18963e71cbcd27fdddc482e9d82c
sha512: f6e03a563352783e5b9ae44692138718f4e49df7de293a3f3707e4c4d36bfa63b5bd4113b7372b8144c7d2747073c946461da4b100b2ca4d04cc214864f938e1
ssdeep: 1536:ReznzfVY0jtCwgMLW1y8z+6LAJ7jY8M/XgeZwvHVhCb5p+WClf4EZdhfN:ReXfG0w/LAlZfVyPCR4W9N
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright xa9 Rune Haze 2001-2011
InternalName: Hairdo Grin Items Sails Comb Take
FileVersion: 3.4
CompanyName: Cronosoft
ProductName: Larks Flow Skate Thank Anger Bride
ProductVersion: 3.4
FileDescription: Bier Arch Edict
OriginalFilename: Viva.exe
Translation: 0x0409 0x04b0

Rootkit.51326 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( f1000f011 )
DrWebTrojan.Hosts.4561
CynetMalicious (score: 100)
ALYacRootkit.51326
CylanceUnsafe
ZillyaTrojan.Qhost.Win32.7852
SangforTrojan.Win32.Qhost.buxin
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/PornoAsset.1a8c2b9a
K7GWTrojan ( f1000f011 )
Cybereasonmalicious.0da58f
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan-Ransom.Win32.PornoAsset.dbfn
BitDefenderRootkit.51326
NANO-AntivirusTrojan.Win32.Qhost.ohpdb
SUPERAntiSpywareTrojan.Agent/Gen-Falint[Cont]
MicroWorld-eScanRootkit.51326
TencentWin32.Trojan.Qhost.Amck
Ad-AwareRootkit.51326
SophosML/PE-A
ComodoMalware@#278zed9p0b9ly
BitDefenderThetaGen:NN.ZexaF.34628.hm0@ayTLuEci
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_PornoAsset.R002C0PAG21
McAfee-GW-EditionGeneric-FABJ!EC6EC770DA58
FireEyeGeneric.mg.ec6ec770da58f265
EmsisoftRootkit.51326 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan/Qhost.dto
WebrootW32.Malware.Gen
AviraRKIT/Agent.115200.16
eGambitGeneric.Malware
MicrosoftTrojan:Win32/Bumat!rts
ArcabitRootkit.DC87E
AegisLabTrojan.Win32.Qhost.4!c
GDataRootkit.51326
TACHYONTrojan/W32.Rootkit.115200.G
AhnLab-V3Trojan/Win32.Qhost.C106480
McAfeeGeneric-FABJ!EC6EC770DA58
MAXmalware (ai score=100)
MalwarebytesMalware.Heuristic.1003
PandaTrj/CI.A
TrendMicro-HouseCallRansom_PornoAsset.R002C0PAG21
YandexTrojan.Qhost!aDdVcdL/KPw
IkarusTrojan.Win32.Ransom
FortinetW32/Zbot.ASK
AVGWin32:Trojan-gen
Qihoo-360HEUR/Malware.QVM01.Gen

How to remove Rootkit.51326?

Rootkit.51326 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment