Trojan

Trojan.Waski.S28288290 removal tips

Malware Removal

The Trojan.Waski.S28288290 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Waski.S28288290 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.Waski.S28288290?


File Info:

name: 399A7ADA8748A7279D63.mlw
path: /opt/CAPEv2/storage/binaries/b2d3dd3d5e03238c79f9f6746c8f5e684b41b95df29c5ce044f499839a3e147e
crc32: 8A3E30C1
md5: 399a7ada8748a7279d63f82a65c8df73
sha1: 404de48c1ef0c922a505295d4ff4f7e45db53863
sha256: b2d3dd3d5e03238c79f9f6746c8f5e684b41b95df29c5ce044f499839a3e147e
sha512: 60afe12b0d978a781fb1691c0f253dc7a5542e49e3d6a16d0da5bcff57293c10130f4c153d4cd4199299d9ffb6ccc20c51b2a724e4ca5955e82a5538c42f363a
ssdeep: 96:mB7YtevLGa7NBMnwAnQWRRUF2CqDE93Iq2e2yME3dTMlRsfUmmUYThEPPPVA22BE:mB7Yt0+QWRRMfykMZlR+OT+VA6MPOAyL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D7329979AFD45572E3BB8E7589F244C6AA74B4233E02985D40DB03850C23F66EDB1A1E
sha3_384: aec89050c6285de08a863b9b1767ad3f5ec08a3149b32d4c81ab6305d3a5444884230bc6919f395f8d669cb270479dc7
ep_bytes: 81ec3408000053555633f65756897424
timestamp: 2014-05-08 10:44:27

Version Info:

0: [No Data]

Trojan.Waski.S28288290 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.lY5V
tehtrisGeneric.Malware
DrWebTrojan.DownLoad3.33216
MicroWorld-eScanTrojan.Downloader.JQQT
CAT-QuickHealTrojan.Waski.S28288290
SkyhighBehavesLike.Win32.Generic.lt
McAfeeDownloader-FBVU!399A7ADA8748
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.Downloader.JQQT
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 0055f33b1 )
BitDefenderTrojan.Downloader.JQQT
K7GWTrojan-Downloader ( 0055f33b1 )
Cybereasonmalicious.c1ef0c
ArcabitTrojan.Downloader.JQQT
BitDefenderThetaGen:NN.ZexaF.36792.auX@am9um2di
VirITTrojan.Win32.Upatre.AZ
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/TrojanDownloader.Waski.E
APEXMalicious
ClamAVWin.Downloader.Upatre-7392215-0
KasperskyHEUR:Trojan-Downloader.Win32.Upatre.gen
AlibabaTrojan:Win32/Upatre.b686
NANO-AntivirusTrojan.Win32.DownLoad3.czagcy
ViRobotTrojan.Win.Z.Upatre.11388.G
RisingDropper.Injector!8.DC (TFE:3:JrFJf4jCRlD)
SophosMal/EncPk-ACO
GoogleDetected
F-SecureHeuristic.HEUR/AGEN.1320027
ZillyaTrojan.Generic.Win32.699290
TrendMicroTROJ_UPATRE.SM37
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.399a7ada8748a727
EmsisoftTrojan.Downloader.JQQT (B)
IkarusTrojan-Downloader.Win32.Waski
JiangminTrojanSpy.Zbot.ffhh
WebrootW32.Trojan.Dropper
VaristW32/S-654ac031!Eldorado
AviraHEUR/AGEN.1320027
MAXmalware (ai score=87)
Antiy-AVLTrojan[Downloader]/Win32.Upatre
Kingsoftmalware.kb.a.999
XcitiumTrojWare.Win32.TrojanDownloader.Waski.ADW@8mzp93
MicrosoftTrojanDownloader:Win32/Upatre.AA
ZoneAlarmHEUR:Trojan-Downloader.Win32.Upatre.gen
GDataWin32.Trojan.PSE.11LLRO4
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Upatre.R158192
Acronissuspicious
ALYacTrojan.Downloader.JQQT
TACHYONTrojan-Spy/W32.ZBot.11388.B
DeepInstinctMALICIOUS
VBA32SScope.Trojan-Downloader.1454
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SM37
TencentTrojan-Downloader.Win32.Upatre.we
YandexTrojan.GenAsa!zfalv5UzsQI
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Upatre.Gen
FortinetW32/Waski.B!tr.dldr
AVGWin32:Evo-gen [Trj]
AvastWin32:Evo-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Waski.S28288290?

Trojan.Waski.S28288290 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment