Trojan-Downloader.Win32.Upatre.frir information

The Trojan-Downloader.Win32.Upatre.frir is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Upatre.frir virus can do?

• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Drops a binary and executes it
• Unconventionial language used in binary resources: Romanian
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Trojan-Downloader.Win32.Upatre.frir?

File Info:
name: 7875F6D4D2D47CC29FAA.mlw
path: /opt/CAPEv2/storage/binaries/f2b2c8275ea1d8c06c1818a0083775b531a9f1d08b680649928014d1c38272de
crc32: 4CDEF4F4
md5: 7875f6d4d2d47cc29faac9eab119ac86
sha1: 60403d4969dd1b628848b57e47ac2f407df69ff4
sha256: f2b2c8275ea1d8c06c1818a0083775b531a9f1d08b680649928014d1c38272de
sha512: e3925723d32be9028140db0df030a253e6d535b06cc1a50385bc6a8caab8d8b93829a2f99a60f0f703bc488c36b8892b255011bcaa32cbf97e8c772777c61bbf
ssdeep: 1536:jKywN8I/DY9eUtll6CMLk1IJ5n4+gkYTjipvF2PIe9c:GNbD3UDIJ5n4+gkYvQd2wt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B573D525BAD3ADA4E073063004B2A5F11126FE167C71D59F38513B2D1A73BC29F62F2A
sha3_384: b92e511bc3df9ee62d81a21e1c7af506f9c90b6caf8a1b2733f4dad84c3741fb20e14d3c1dbfaf3e8f390eab2e18da3e
ep_bytes: 558bec83ec4456ff15182040008bf08a
timestamp: 2014-01-29 19:27:25

Version Info:
CompanyName: RETRO-soft
FileDescription: 
FileVersion: 2.3.0.104
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: RETROTool
ProductVersion: 2.3
Translation: 0x0409 0x04e4

Trojan-Downloader.Win32.Upatre.frir also known as:

How to remove Trojan-Downloader.Win32.Upatre.frir?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.