Categories: Trojan

Trojan.Swrort.S23689749 removal

The Trojan.Swrort.S23689749 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Swrort.S23689749 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Binary file triggered YARA rule
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Swrort.S23689749?


File Info:
name: 85ACFEE86FD742AC5B6E.mlwpath: /opt/CAPEv2/storage/binaries/601227d52c6e367e11b80240183d07d38bc11a88e844e8401fce17eb25e92ba8crc32: 0AD4ADDCmd5: 85acfee86fd742ac5b6e347cd860324bsha1: 91677465635ff139d8b98ce5a517b7135301104fsha256: 601227d52c6e367e11b80240183d07d38bc11a88e844e8401fce17eb25e92ba8sha512: 38b105b802707cb28585727ac82146b79fef22451efa81eb88097dbb7ed7c87f4f584fb04f57aeb9e3c75681a26ae4b4f22ebf100db83dcdea22d70ed24295ddssdeep: 24576:I4nXubIQGyxbPV0db26bVSSR0o6y2odSSR0o6y2B:Iqe3f6NSSR0o6y2SSSR0o6y2type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A565C7EABD885DD8D467B2F0A066866107762D54E88D498C0AF83C7DCB354A3DD2B13Fsha3_384: 3cf647629d7bb03e9ff22f776ba1d86ff883b74e9314670169a2e250449fd99aca7162a7771046b22db2b239492e7410ep_bytes: 606831505200ff1548234c00683a5052timestamp: 2020-11-15 09:48:30
Version Info:
0: [No Data]

Trojan.Swrort.S23689749 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Rozena.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
FireEye	Generic.mg.85acfee86fd742ac
CAT-QuickHeal	Trojan.Swrort.S23689749
Skyhigh	BehavesLike.Win32.Infected.th
ALYac	Trojan.Agent.Rozena
Cylance	unsafe
Zillya	Trojan.Rozena.Win32.127752
Sangfor	Suspicious.Win32.Save.ins
Alibaba	Trojan:Win32/Meterpreter.9326272d
K7GW	Trojan ( 004b3efc1 )
K7AntiVirus	Trojan ( 004b3efc1 )
Arcabit	Win32.Rozena.B
BitDefenderTheta	AI:FileInfector.2395B8760E
Symantec	Meterpreter
ESET-NOD32	a variant of Win32/Rozena.KC.gen
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.MSShellcode-6360728-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Win32.Rozena.B
NANO-Antivirus	Trojan.Win32.Swrort.eratya
ViRobot	Win32.Rozena.A
MicroWorld-eScan	Win32.Rozena.B
Avast	Win32:Swrort-I [Trj]
Tencent	Win32.Trojan.Generic.Mgil
Emsisoft	Win32.Rozena.B (B)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.Swrort.10
VIPRE	Win32.Rozena.B
TrendMicro	Backdoor.Win32.SWRORT.ANE
Trapmine	suspicious.low.ml.score
Sophos	Mal/Swrort-H
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.hcice
Webroot	W32.Trojan.Gen
Varist	W32/Rozena.H.gen!Eldorado
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Meterpreter.a
Microsoft	Trojan:Win32/Meterpreter.RPZ!MTB
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Rozena.B
Google	Detected
AhnLab-V3	Trojan/Win32.Wacatac.C4217634
McAfee	Trojan-FTXN!85ACFEE86FD7
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Downloader
Malwarebytes	Generic.Malware/Suspicious
Panda	Generic Suspicious
TrendMicro-HouseCall	Backdoor.Win32.SWRORT.ANE
Rising	Backdoor.MeterPreter!1.AEA1 (CLASSIC)
Yandex	Trojan.Agent!8tra/n0m+5I
Ikarus	Trojan.Win32.Rozena
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Generic.AP.23ADC0!tr
AVG	Win32:Swrort-I [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Backdoor:Win/metasploit.shellcode