Trojan

About “Trojan.WacatacRI.S19404752” infection

Malware Removal

The Trojan.WacatacRI.S19404752 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.WacatacRI.S19404752 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan.WacatacRI.S19404752?


File Info:

crc32: FD2091C4
md5: 8a35f0cbfeba8639edd93eda1b110323
name: 8A35F0CBFEBA8639EDD93EDA1B110323.mlw
sha1: b69542df51dff2d5a2fc2fc634fabc7946ed26a2
sha256: 81b81eefc32a6e0be50c36679fc28696823e5566966eec5bf7098ba5421e937b
sha512: 0a4f6bbc4d5b29bbe16ef6232ce9eecd6612adb261c819a4732de9948c4c49738b7839e8e65c434ca188dd628bf438baafaf37692dd863a54cb9fa1b24e65ac0
ssdeep: 24576:5bCpdbcghypRD+4dmmCE5yrjPZ8DVl7BTSkdl:5bR/DL0E5MCDX7Qkdl
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2019 Intel Corporation
InternalName: AESM
FileVersion: 2.5.100.2
CompanyName: Intel Corporation
ProductName: Intelxae Software Guard Extensions
ProductVersion: 2.5.100.2
FileDescription: Intelxae SGX Application Enclave Services Manager
OriginalFilename: aesm_service.exe
Translation: 0x0409 0x04b0

Trojan.WacatacRI.S19404752 also known as:

K7AntiVirusVirus ( 00535e4a1 )
Elasticmalicious (high confidence)
DrWebWin64.Expiro.134
CynetMalicious (score: 100)
CAT-QuickHealTrojan.WacatacRI.S19404752
ALYacWin64.Expiro.Gen.6
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaVirus:Win64/Expiro.0b5f7d82
K7GWVirus ( 00535e4a1 )
Cybereasonmalicious.bfeba8
CyrenW64/Expiro.R.gen!Eldorado
SymantecTrojan.Gen.6
ESET-NOD32a variant of Win64/Expiro.CO
APEXMalicious
AvastFileRepMalware
ClamAVWin.Virus.Expiro-9879592-0
KasperskyHEUR:Virus.Win64.Expiro.gen
BitDefenderWin64.Expiro.Gen.6
MicroWorld-eScanWin64.Expiro.Gen.6
TencentWin64.Virus.Expiro.Eand
Ad-AwareWin64.Expiro.Gen.6
SophosML/PE-A + W64/Expiro-AV
TrendMicroVirus.Win64.EXPIRO.MR
McAfee-GW-EditionArtemis!Virus
FireEyeWin64.Expiro.Gen.6
EmsisoftWin64.Expiro.Gen.6 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Bingoml.avt
AviraW64/Infector.Gen
Antiy-AVLTrojan/Generic.ASVirus.307
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitWin64.Expiro.Gen.6
GDataWin64.Expiro.Gen.6
MAXmalware (ai score=80)
PandaTrj/CI.A
TrendMicro-HouseCallVirus.Win64.EXPIRO.MR
IkarusVirus.Win64.Expiro
MaxSecurevirus.win64.expiro.gen
FortinetW64/Expiro.CE
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Trojan.WacatacRI.S19404752?

Trojan.WacatacRI.S19404752 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment