Trojan-Spy.Win32.AveMaria.dku malicious file

The Trojan-Spy.Win32.AveMaria.dku is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Spy.Win32.AveMaria.dku virus can do?

• Executable code extraction
• Attempts to connect to a dead IP:Port (2 unique times)
• Creates RWX memory
• Reads data out of its own binary image
• Drops a binary and executes it
• A scripting utility was executed
• Attempts to remove evidence of file being downloaded from the Internet
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Attempts to modify proxy settings
• Creates a copy of itself

Related domains:

How to determine Trojan-Spy.Win32.AveMaria.dku?

File Info:
crc32: 652EE1C7
md5: bd229171170d566e778978f4e19ee1e4
name: NEW ORDER #102020.exe
sha1: 260cb2c167c2a2510ae9dfa1ecc166c9f72f49e3
sha256: d0730147283a7764f29031afd0b03018a1f921cbb25f25d4560b126ca31e326b
sha512: 39fe43f0daf520cad32f67cbbff9aaeb34ad4e84431dfa727cf18a4ef6d900504118b61bc9fb0d292635500ef003afc4eb1745ba47add953991007cb40db7a47
ssdeep: 24576:lUpNI4+YoyYNDLNlPsWERLvD7gpN+8TVU4:O84+m0DL3Ps7gXhU4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan-Spy.Win32.AveMaria.dku also known as:

How to remove Trojan-Spy.Win32.AveMaria.dku?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.