Categories: Trojan

What is “Trojan.Heur.6u3arDXJdAaiQ”?

The Trojan.Heur.6u3arDXJdAaiQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Heur.6u3arDXJdAaiQ virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempted to write directly to a physical drive
Anomalous binary characteristics

How to determine Trojan.Heur.6u3arDXJdAaiQ?


File Info:
name: 465BD59FD356EAF9447B.mlwpath: /opt/CAPEv2/storage/binaries/a9f482b8db0e455cf22b769a10bc16e8f28a33079a57fce0115b6b85696a46b4crc32: F112C405md5: 465bd59fd356eaf9447bdffab67c42b4sha1: 63f16a9c7e486d46571613247fac11a8af628958sha256: a9f482b8db0e455cf22b769a10bc16e8f28a33079a57fce0115b6b85696a46b4sha512: 290f5b50658b0383c159f156958db7aebeeff87747ddfb1d7d2d5d08f48d1b10a0d1df0a4c352dfb1c8264b0d252ecf2a3a7774782915159b1c2071489461732ssdeep: 24576:SgpYOKKKBR2jJ+AxzH7ZESrv1xqgZUGU2LTyqJ9zy7q:SNRKKItxvZ/D1AgUGUIT9type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F91523437B53E29BE8440431EA7BD6F295B8ED06DC989AAF35673D7638FB612100390Dsha3_384: ff01036d0cc8d5c29bf16a04cae23891f5955db243107b1ef76ee1ddd7eeeab871817ab9d3e92803551521a87c26e058ep_bytes: 6801904d00e801000000c3c3458e5687timestamp: 2011-05-17 17:09:51
Version Info:
Translation: 0x0409 0x04b0Comments: gLKCompanyName: CvnFileDescription: WdZord39LegalCopyright: A9BWte2J1YLegalTrademarks: emNCrZt8yProductName: PLwKOKd0FileVersion: 9.44.0039ProductVersion: 9.44.0039InternalName: Stub3OriginalFilename: Stub3.exe

Trojan.Heur.6u3arDXJdAaiQ also known as:

Lionic	Trojan.Win32.Generic.lvT1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.6u3arDXJdAaiQ
McAfee	GenericRXAA-FA!465BD59FD356
Malwarebytes	Generic.Trojan.Injector.DDS
Zillya	Trojan.Refroso.Win32.33048
K7AntiVirus	Trojan ( 0055e3991 )
Alibaba	Trojan:Win32/VBKrypt.5fb55f63
K7GW	Trojan ( 0055e3991 )
Cybereason	malicious.fd356e
VirIT	Trojan.Win32.Generic.AWEZ
Cyren	W32/VB.DO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.XFY
APEX	Malicious
ClamAV	Win.Trojan.Manbat-6915473-0
Kaspersky	Trojan.Win32.VBKrypt.dalx
BitDefender	Gen:Trojan.Heur.6u3arDXJdAaiQ
NANO-Antivirus	Trojan.Win32.VBKrypt.ghqxa
Avast	Win32:VB-WND [Drp]
Tencent	Win32.Trojan.Vbkrypt.Lflw
Emsisoft	Gen:Trojan.Heur.6u3arDXJdAaiQ (B)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.VbCrypt.89
VIPRE	Gen:Trojan.Heur.6u3arDXJdAaiQ
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.465bd59fd356eaf9
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
GData	Gen:Trojan.Heur.6u3arDXJdAaiQ
Jiangmin	Trojan/Refroso.tve
Google	Detected
Avira	TR/Dropper.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.VBKrypt
Xcitium	TrojWare.Win32.VBInject.IK@1qsu2f
Arcabit	Trojan.Heur.6u3arDXJdAaiQ
ViRobot	Trojan.Win32.A.VBKrypt.240146.A
ZoneAlarm	Trojan.Win32.VBKrypt.dalx
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.VBKrypt.C61097
BitDefenderTheta	AI:Packer.431F66B91D
ALYac	Gen:Trojan.Heur.6u3arDXJdAaiQ
VBA32	Malware-Cryptor.VB.gen.1
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Dropper.Generic!8.35E (CLOUD)
Yandex	Trojan.Agent!JS+2aaXSg+E
Ikarus	Trojan.Win32.Spy
Fortinet	W32/VBInjector.W!tr
AVG	Win32:VB-WND [Drp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)