Categories: Malware

Troj/Steale-HD removal tips

The Troj/Steale-HD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Steale-HD virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Compression (or decompression)
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Expresses interest in specific running processes
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Attempts to disable UAC
Attempts to modify or disable Security Center warnings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Troj/Steale-HD?


File Info:
crc32: DFA713F1md5: ff0ba8d70f62547d84b1c1617a939ae4name: bi.exesha1: 4f26d20ecba0f37ba30de970c0d4eb0dc667a914sha256: 8c1f920f336960c76fc775ed77803e1673cf3ccd75d7999d82769b8dad76ddfasha512: 883be4e791ec80ae02d7cdfcd7ed2ff9b2a122660496abd5bc21baf67db095d548c7b601bf18019684b8b7aa0410c3c3dfd0878397aea47c46414a11fe19ce18ssdeep: 12288:w99f3KPQ8GqV7Y/QOPL2gs6QzYhxiKHCu/FZetA61dDdNywbNwSch/s:e9PyQW7cjLA6u437N+A61dvysHtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (c) 2013 AVAST SoftwareInternalName: AvastUi.exeFileVersion: 9.0.2016.330CompanyName: AVAST SoftwareProductName: avast! AntivirusProductVersion: 9.0.2016.330FileDescription: avast! AntivirusOriginalFilename: AvastUi.exeTranslation: 0x0009 0x04e4

Troj/Steale-HD also known as:

MicroWorld-eScan	Trojan.GenericKD.32828466
Malwarebytes	Spyware.Agent
AegisLab	Trojan.Win32.Kryptik.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 0055d80c1 )
K7GW	Trojan ( 0055d80c1 )
Cybereason	malicious.ecba0f
TrendMicro	TSPY_HPLOKI.SMBD
Cyren	W32/Trojan.FQLH-5375
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Kryptik.gen
Alibaba	Trojan:Win32/DelfInject.ali2000015
Rising	Trojan.Generic@ML.100 (RDML:ImY7Gdy0TvdVI9yMMgUIFA)
Ad-Aware	Trojan.GenericKD.32828466
Sophos	Troj/Steale-HD
F-Secure	Trojan.TR/Injector.kgoyd
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	Fareit-FQP!FF0BA8D70F62
Emsisoft	Trojan.GenericKD.32828466 (B)
Webroot	W32.Trojan.Gen
Avira	TR/Injector.kgoyd
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan.Win32.Kryptik.gen
Microsoft	Trojan:Win32/Lokibot.ART!eml
AhnLab-V3	Win-Trojan/Delphiless.Exp
McAfee	Fareit-FQP!FF0BA8D70F62
MAX	malware (ai score=87)
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Injector.EJMX
TrendMicro-HouseCall	TSPY_HPLOKI.SMBD
eGambit	Unsafe.AI_Score_98%
Fortinet	W32/Agent.AJFK!tr
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Trojan.Generic