Categories: Trojan

Should I remove “Trojan.MauvaiseRI.S5256069”?

The Trojan.MauvaiseRI.S5256069 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.MauvaiseRI.S5256069 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Reads data out of its own binary image
Manipulates data from or to the Recycle Bin
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to modify proxy settings
Harvests cookies for information gathering

How to determine Trojan.MauvaiseRI.S5256069?


File Info:
name: 7DCC479B94CD8300AEE8.mlwpath: /opt/CAPEv2/storage/binaries/4ae04d8272912945e5a9d4191053b4caaba61c671bd90f2d090d4ca2acb8d17fcrc32: E9A5C43Bmd5: 7dcc479b94cd8300aee8965b8adc9e59sha1: 22482b330733cd0e9553c1e3b15ad3d5c9e7a4a1sha256: 4ae04d8272912945e5a9d4191053b4caaba61c671bd90f2d090d4ca2acb8d17fsha512: b06880d887b20923b753c8c21ed2eef9929c3c3cd9b63d08e6b1c4d19f32580762de9f5f1cfff72c0d7b7db38ada7ab9fb8d951b092bb3acf87bb7e3961c44e1ssdeep: 49152:nkxjNniVQ2/Cin+0MMV5bS7NwaHjkYyHM9gZPoKoOyc:iNni7/Cm3naHjgpFtype: PE32+ executable (GUI) x86-64, for MS Windowstlsh: T18E85AE55E76405F4D67BC238C852958BE7F1B81517B08BEF0AA60AAA0F337D05E3EB11sha3_384: a5054522e3fb5cd7d9adb51b4c4ac0d1a1288a46fb0e777d2e3fda5bf07b516f5ddb5fd477e8b64f1240e069ffdea011ep_bytes: 4883ec28e8770700004883c428e982fetimestamp: 2017-12-09 17:54:17
Version Info:
0: [No Data]

Trojan.MauvaiseRI.S5256069 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.980121
FireEye	Generic.mg.7dcc479b94cd8300
CAT-QuickHeal	Trojan.MauvaiseRI.S5256069
ALYac	Gen:Variant.Razy.980121
Zillya	Worm.Agent.Win64.39
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0052036a1 )
K7GW	Trojan ( 0052036a1 )
Cybereason	malicious.b94cd8
Cyren	W64/CoinMiner.FI.gen!Eldorado
ESET-NOD32	a variant of Win64/Agent.C
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.980121
Avast	Win64:Malware-gen
Tencent	Malware.Win32.Gencirc.10ba846a
Ad-Aware	Gen:Variant.Razy.980121
Emsisoft	Gen:Variant.Razy.980121 (B)
Sophos	Mal/Miner-Y
Ikarus	PUA.CoinMiner
GData	Gen:Variant.Razy.980121
Jiangmin	TrojanDropper.Agent.cifi
Antiy-AVL	Trojan/Generic.ASMalwS.237C563
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Generic.R361436
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.3510694035
Yandex	Trojan.GenAsa!qpIRv3xIaoo
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W64/CoinMiner.C!worm
AVG	Win64:Malware-gen
CrowdStrike	win/malicious_confidence_60% (D)