Trojan.HavexRI.S10571629 malicious file

The Trojan.HavexRI.S10571629 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.HavexRI.S10571629 virus can do?

Executable code extraction
Creates RWX memory
Attempts to connect to a dead IP:Port (7 unique times)
Performs some HTTP requests
Unconventionial language used in binary resources: Chinese (Simplified)
Queries information on disks, possibly for anti-virtualization

Related domains:

apinew.acfnus.com

down.chuangyi88.cn

static.99por.com

static.acfnus.com

partner.funshion.com

api.ip138.com

How to determine Trojan.HavexRI.S10571629?


File Info:
crc32: 096E2B5B
md5: d8b5f5262edb83364dd86d323cc7886f
name: 382ca50e____________818.exe
sha1: 76529dc771d9149c78d03e1d7a564a637b4d215f
sha256: f93d79091da877ff044c1e2ad5d1f27abaf05a94e82e233d4d3c6c091b13b092
sha512: 8d72a21d6e8653746d8ad74732cb3730134a5201042e2c0c8f1d0da788446f094129f7aa274e5aa65243aa3d7ca45844aef87fe55e2897e14e730d68da5dc516
ssdeep: 49152:Oy+wSyWWislfa9dk4f+Fb8EKzIjbTqCkPqA+1BCOYwGJM96bB:Oy+wfha44fCM8VbR1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan.HavexRI.S10571629 also known as:

MicroWorld-eScan	Gen:Variant.Ulise.93834
FireEye	Gen:Variant.Ulise.93834
CAT-QuickHeal	Trojan.HavexRI.S10571629
ALYac	Gen:Variant.Ulise.93834
Zillya	Trojan.Havex.Win32.207
BitDefender	Gen:Variant.Ulise.93834
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
GData	Gen:Variant.Ulise.93834
Kaspersky	HEUR:Trojan.Win32.Havex.vho
Rising	Trojan.Havex!8.3291 (TFE:5:zRWjgFJMMGF)
Ad-Aware	Gen:Variant.Ulise.93834
F-Secure	Trojan.TR/Havex.avgod
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.wh
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Ulise.93834 (B)
Ikarus	Trojan.Havex
Jiangmin	Trojan.Havex.be
Avira	TR/Havex.avgod
MAX	malware (ai score=89)
Arcabit	Trojan.Ulise.D16E8A
ZoneAlarm	HEUR:Trojan.Win32.Havex.vho
Microsoft	Trojan:Win32/Wacatac.D!ml
AhnLab-V3	Malware/Win32.Generic.C3770622
McAfee	Trojan-FRTM!D8B5F5262EDB
TACHYON	Trojan/W32.Havex.3184128
VBA32	Trojan.Havex
Tencent	Malware.Win32.Gencirc.10b8a550
Yandex	Trojan.Havex!
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Havex.AKW!tr
AVG	Win32:TrojanX-gen [Trj]
Qihoo-360	Win32/Trojan.475

How to remove Trojan.HavexRI.S10571629?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.HavexRI.S10571629 malicious file