Trojan

What is “Trojan-Dropper.Win32.Dinwod.aapb”?

Malware Removal

The Trojan-Dropper.Win32.Dinwod.aapb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Dropper.Win32.Dinwod.aapb virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Exhibits possible ransomware file modification behavior
  • Network activity detected but not expressed in API logs
  • Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Dropper.Win32.Dinwod.aapb?


File Info:

crc32: EC0C6DB1
md5: fdd80cd4d83220db652f86ac258223ff
name: FDD80CD4D83220DB652F86AC258223FF.mlw
sha1: d6eca12b16aba318a3ad6027ad3ea3adf667d760
sha256: 32bd55171cefa994b568d860d6884b7e0f60c8ceac05c04b1977c47c121f63ac
sha512: 998059b276421a3a047e9cf5964b5b840382ad268187eef1aefae3c6d2807422f8d736d376e97e84f77a856adf1566b19cc833069b88381b79824b199be50a56
ssdeep: 24576:I6iEe36z6cPk1bFx1vdwjIxVFfFIaiE3FfSk8KO+o:I6E64x1qjAVBmsJ5O+
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan-Dropper.Win32.Dinwod.aapb also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Dinwod.4!c
Elasticmalicious (high confidence)
DrWebTrojan.KillFiles.59586
CynetMalicious (score: 100)
CAT-QuickHealTrojanpws.Qqpass.16543
CylanceUnsafe
SangforTrojan.Win32.Save.a
AlibabaTrojanDropper:Win32/Dinwod.d716c613
CyrenW32/Heuristic-Blackmoon!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Dinwod-9792180-0
KasperskyTrojan-Dropper.Win32.Dinwod.aapb
NANO-AntivirusTrojan.Win32.Drop.efabxc
TencentWin32.Trojan-dropper.Dinwod.Eibo
ComodoMalware@#1bzabq06cpxe0
BitDefenderThetaGen:NN.ZexaF.34170.2mGfa4vPPcp
VIPRETrojan.Win32.Generic!BT
FireEyeGeneric.mg.fdd80cd4d83220db
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.jdsv
Antiy-AVLTrojan/Generic.ASCommon.FA
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!FDD80CD4D832
VBA32BScope.Trojan.Pincav
PandaTrj/CI.A
RisingTrojan.Injector!1.A1C3 (CLASSIC)
YandexTrojan.GenAsa!aNuSaH++7PY
IkarusWorm.Win32.Koobface
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan-Dropper.Win32.Dinwod.aapb?

Trojan-Dropper.Win32.Dinwod.aapb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment