Categories: Rootkit

Rootkit.72920 removal tips

The Rootkit.72920 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Rootkit.72920 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Rootkit.72920?


File Info:

name: 7A3DD55DE95BF4BEB19E.mlwpath: /opt/CAPEv2/storage/binaries/00980030a44b81d6adb33aac860cb7ad9a29162fdab350b7d257d3bbcf712ac7crc32: F7E341C3md5: 7a3dd55de95bf4beb19eab0e3c8273a4sha1: 3953896c77ad7c9823a0929e16dd868aabf7e988sha256: 00980030a44b81d6adb33aac860cb7ad9a29162fdab350b7d257d3bbcf712ac7sha512: d1bfa6c3e7e0b2162999121416ace5725f71868b8fe2fa4d1d89ed93982b3bb7190b8d6936c95e2aa215b6340707b92ce56faf155e6f0fd169d1d5e3e0d19e19ssdeep: 24:ev1GSHop/vbirjH2hRLLgT9Nw9pugofxquPXv8jvlF6K8JzFY6qveTVidfN8imz:qHoRvbZLLgTwndwXFJRYNaVid1Dmztype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A3418262CA689E74D05B82F57E1E9F5988F43011760CE1174AEC4C522EA1116AF87E4Csha3_384: 1fa1127d2d0a5325ac1944d4179f31c8e100a9a211b80335a7b58c01edaee5fc24b7f271b225cbea727b78382e99fb42ep_bytes: 558bec51538b4508c740349104400033timestamp: 2009-04-21 16:49:00

Version Info:

0: [No Data]

Rootkit.72920 also known as:

Lionic Trojan.Multi.Generic.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Rootkit.72920
FireEye Generic.mg.7a3dd55de95bf4be
McAfee Artemis!7A3DD55DE95B
Cylance Unsafe
VIPRE Rootkit.72920
Sangfor Trojan.Win32.Agent.2176
CrowdStrike win/malicious_confidence_70% (W)
Alibaba Rootkit:Win32/Generic.58275da3
K7GW Trojan ( 00509d1f1 )
K7AntiVirus Trojan ( 00509d1f1 )
Symantec Trojan.Gen.MBT
APEX Malicious
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Rootkit.72920
Avast Win32:Malware-gen
Ad-Aware Rootkit.72920
Sophos Mal/Generic-R + Mal/Rootkit-Q
TrendMicro TROJ_GEN.R002C0RDQ22
McAfee-GW-Edition Artemis!Trojan
Emsisoft Rootkit.72920 (B)
Webroot W32.Malware.Gen
Avira HEUR/AGEN.1240115
MAX malware (ai score=80)
Antiy-AVL Trojan/Generic.ASMalwS.6C82
Kingsoft Win32.Malware.Heur_Generic.B.(kcloud)
Microsoft Trojan:Win32/Wacatac.B!ml
GData Rootkit.72920
Cynet Malicious (score: 99)
ALYac Rootkit.72920
TACHYON Trojan/W32.Agent.2176.P
TrendMicro-HouseCall TROJ_GEN.R002C0RDQ22
Rising Trojan.Generic@AI.98 (RDML:IUFtD5Ir6MOx6T4IDzI/XQ)
Yandex Rootkit.Agent!pt2hDZlivjA
Ikarus Rootkit
MaxSecure Trojan.Malware.8948555.susgen
AVG Win32:Malware-gen
Cybereason malicious.de95bf
Panda Trj/GdSda.A

How to remove Rootkit.72920?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

About “Heur.Conjar.!c!.3” infection

The Heur.Conjar.!c!.3 is considered dangerous by lots of security experts. When this infection is active,…

47 seconds ago

Malware.AI.2068984497 information

The Malware.AI.2068984497 is considered dangerous by lots of security experts. When this infection is active,…

11 mins ago

How to remove “Lazy.412303”?

The Lazy.412303 is considered dangerous by lots of security experts. When this infection is active,…

31 mins ago

What is “Malware.AI.3215062782”?

The Malware.AI.3215062782 is considered dangerous by lots of security experts. When this infection is active,…

47 mins ago

Ransom.Loki.9508 removal guide

The Ransom.Loki.9508 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Malware.AI.2988467486 (file analysis)

The Malware.AI.2988467486 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago