Rootkit.51935 (file analysis)

The Rootkit.51935 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Rootkit.51935 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Rootkit.51935?


File Info:
crc32: 3C638B4C
md5: 45dcb73d680fa842462ac0bb3cc77aae
name: 45DCB73D680FA842462AC0BB3CC77AAE.mlw
sha1: 52cc36f54b799972535bc393ba3306611a01c044
sha256: 625cc0e5cb1941ae6be7b7ed590855cd27116ba68b0f8d892c8617b95d8c7c23
sha512: 7d33c6d65a7cda41580bd02401dfe60053aed2c4f2b16c7bc24f5f3e5aea61a440b7c5f019e0232b681b40f326a921084e7ba02744bfd2c831804dd4108166ee
ssdeep: 1536:mWHzsJAucXDJLHaUmYt0vXZ8HCI0+3V76UMy5wgfd8/JXZoSIo5:9sJ8DJNmO0vLItVuy5wgl8/JXZz
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Dying xa9 Conch Sect 1998-2010
InternalName: Coop Zing
FileVersion: 2.1
CompanyName: Lenovo Corporation
ProductName: Maud
ProductVersion: 2.1
FileDescription: Wet Swam Darts Virgil
OriginalFilename: Win.exe
Translation: 0x0409 0x04b0

Rootkit.51935 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0023d7211 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Rootkit.51935
Cylance	Unsafe
Zillya	Trojan.Delf.Win32.76564
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Trojan:Win32/EncPk.fc28500a
K7GW	Trojan ( 0023d7211 )
Cybereason	malicious.d680fa
Cyren	W32/SuspPack.EC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Delf.QBH
APEX	Malicious
Avast	Win32:MalOb-IJ [Cryp]
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Rootkit.51935
MicroWorld-eScan	Rootkit.51935
Tencent	Win32.Trojan.Crypt.Peqe
Ad-Aware	Rootkit.51935
Comodo	Malware@#236b3cw5ee7fq
BitDefenderTheta	Gen:NN.ZexaF.34050.hO0@a0zTeDii
VIPRE	Trojan.Win32.EncPk.acl (v)
FireEye	Generic.mg.45dcb73d680fa842
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Qhost.dtx
Avira	TR/Crypt.XPACK.Gen
eGambit	Generic.Malware
Antiy-AVL	Trojan/Generic.ASMalwS.1894CF6
Microsoft	Trojan:Win32/Dynamer!ac
GData	Rootkit.51935
Acronis	suspicious
McAfee	Artemis!45DCB73D680F
MAX	malware (ai score=100)
VBA32	Trojan.Qhost
Panda	Generic Malware
Rising	Trojan.Generic@ML.90 (RDML:2s/bJL0i6l3GiUxebQXmBg)
Yandex	Trojan.GenAsa!tkfifwRJX7E
Ikarus	Trojan.Win32.Ransom
Fortinet	W32/Yakes.LS!tr
AVG	Win32:MalOb-IJ [Cryp]
Paloalto	generic.ml
Qihoo-360	Win32/Rootkit.Generic.HgIASOoA

How to remove Rootkit.51935?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Rootkit.51935 (file analysis)