Categories: Trojan

Trojan.Script.474477 removal

The Trojan.Script.474477 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Script.474477 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Attempts to modify proxy settings
Harvests cookies for information gathering
Uses suspicious command line tools or Windows utilities

How to determine Trojan.Script.474477?


File Info:
name: E47BBE4C9D9B05548605.mlwpath: /opt/CAPEv2/storage/binaries/872db225ccd1d70cd90391f078c6963cd2ecab4c054e31633448f62846bccc93crc32: 8D72B26Dmd5: e47bbe4c9d9b05548605c88302fcad8dsha1: 63fec05691397d44e1d8ff028a2407c96e1e45f6sha256: 872db225ccd1d70cd90391f078c6963cd2ecab4c054e31633448f62846bccc93sha512: 831a4314c949265a9aef3c42a2e22b8a755de062dd2d6c7d795c1b33aba0a6e4778f44934fef2365a24a4e3b32635c3895268ba36a5002587cab0701bcc4fbd8ssdeep: 12288:zaWzgMg7v3qnCiMErQohh0F4CCJ8lnyi8X:2aHMv6Corjqnyi8type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C4D4AE12F7D680B6D99338B5297BE32BEB3576194327C497ABE02E738F111405B3A361sha3_384: f71695738c50608efce0d9e4c50969a3554b94f9e9a7c4a3e24c032e6c3d59a40dce5773761afdfae5d91b0dc5cc1248ep_bytes: e8a7c00000e979feffffcccccccccccctimestamp: 2010-04-16 07:47:33
Version Info:
FileVersion: 1.0.0.2FileDescription: oemLegalCopyright: oemTranslation: 0x0804 0x04b0

Trojan.Script.474477 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Agent.4!c
MicroWorld-eScan	Trojan.Script.474477
FireEye	Generic.mg.e47bbe4c9d9b0554
ALYac	Trojan.Script.474477
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.685998
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanClicker:Win32/StartPage.fc15a7de
K7GW	Trojan ( 0055e40d1 )
K7AntiVirus	Trojan ( 0055e40d1 )
Baidu	Win32.Trojan.StartPage.ed
Symantec	Trojan.Gen
ESET-NOD32	Win32/StartPage.OBL
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Clicker.Win32.Agent.rux
BitDefender	Trojan.Script.474477
NANO-Antivirus	Trojan.Script.Agent.emwasc
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Agent.Ajlj
Ad-Aware	Trojan.Script.474477
Emsisoft	Trojan.Script.474477 (B)
DrWeb	Trojan.Click2.34119
VIPRE	Trojan.Win32.Generic.pak!cobra
TrendMicro	TROJ_FRS.0NA103BL20
McAfee-GW-Edition	BehavesLike.Win32.Virus.jh
Sophos	Mal/Generic-S
Ikarus	Trojan.Script
GData	Trojan.Script.474477 (2x)
Webroot	W32.Malware.Heur
Avira	HEUR/AGEN.1229538
Arcabit	Trojan.Script.D73D6D
ZoneAlarm	UDS:Trojan-Clicker.Win32.Agent.rux
Microsoft	Trojan:Win32/Occamy.C87
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win32.Sohanad.C284086
McAfee	Artemis!E47BBE4C9D9B
MAX	malware (ai score=100)
VBA32	TrojanClicker.Agent
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_FRS.0NA103BL20
MaxSecure	Virus.W32.Pioneer.H
Fortinet	W32/Agent.obl!tr
AVG	Win32:Malware-gen
Panda	Trj/CI.A