Trojan

Trojan.Waski.S28288290 malicious file

Malware Removal

The Trojan.Waski.S28288290 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Waski.S28288290 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.Waski.S28288290?


File Info:

name: ED83B25A191400961508.mlw
path: /opt/CAPEv2/storage/binaries/d844b084072725677625f83fdf07cea09dda94bd38f8ba81fa897f9820fefb40
crc32: BC0C8EE4
md5: ed83b25a191400961508820b4d82937c
sha1: 5280c34519d577f22eb549ef0816f9395b30bf43
sha256: d844b084072725677625f83fdf07cea09dda94bd38f8ba81fa897f9820fefb40
sha512: 2d06104fd44e3f02ad2c79662549a684cdfefa279e8831cdf63cc222a07a5a050dc9a0d2c0bfafa48909339754cf81ac318a415f4ecfb4aca0c9e603f072b00b
ssdeep: 96:mB7YtevLGa+YBMnwAnQWRRUF2CqDC2j7I:mB7Yt58+QWRRMEfI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T162D1832A5FD449A3F2F78A7488F244C6EB78741337104DFE61BB038509979C69C91B1E
sha3_384: c58e21f2cac94d68dbb9bc3a7b6bbbf3364a9ee0dac76768a933206647eb65826b27e2f958f06bdaf62643ffbea971b5
ep_bytes: 81ec3408000053555633f65756897424
timestamp: 2014-05-08 10:44:27

Version Info:

0: [No Data]

Trojan.Waski.S28288290 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Downloader.JQQT
FireEyeGeneric.mg.ed83b25a19140096
CAT-QuickHealTrojan.Waski.S28288290
SkyhighBehavesLike.Win32.Generic.xt
ALYacTrojan.Downloader.JQQT
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.Downloader.JQQT
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 0055f33b1 )
K7GWTrojan-Downloader ( 0055f33b1 )
Cybereasonmalicious.519d57
ArcabitTrojan.Downloader.JQQT
BitDefenderThetaAI:Packer.FAF4923F20
VirITTrojan.Win32.Upatre.AZ
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/TrojanDownloader.Waski.E
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Downloader.Upatre-7392215-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Downloader.JQQT
NANO-AntivirusTrojan.Win32.DownLoad3.czagcy
AvastWin32:Evo-gen [Trj]
TencentTrojan-Downloader.Win32.Upatre.we
TACHYONTrojan/W32.Tremp.6530
SophosMal/EncPk-ACO
F-SecureHeuristic.HEUR/AGEN.1320027
DrWebTrojan.DownLoad3.33216
ZillyaTrojan.Generic.Win32.699290
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.Downloader.JQQT (B)
IkarusTrojan-Downloader.Win32.Waski
JiangminTrojanSpy.Zbot.ffhh
WebrootW32.Trojan.Dropper
VaristW32/S-47db96bb!Eldorado
AviraHEUR/AGEN.1320027
Antiy-AVLTrojan[Downloader]/Win32.Upatre
Kingsoftmalware.kb.a.998
XcitiumTrojWare.Win32.TrojanDownloader.Waski.ADW@8mzp93
MicrosoftTrojanDownloader:Win32/Upatre.AA
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan.PSE.11LLRO4
GoogleDetected
AhnLab-V3Trojan/Win32.Upatre.R158192
Acronissuspicious
McAfeeDownloader-FBVU!ED83B25A1914
MAXmalware (ai score=87)
VBA32SScope.Trojan-Downloader.1454
Cylanceunsafe
PandaTrj/Genetic.gen
RisingDropper.Injector!8.DC (TFE:3:JrFJf4jCRlD)
YandexTrojan.GenAsa!zfalv5UzsQI
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Upatre.Gen
FortinetW32/Waski.B!tr.dldr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.Waski.S28288290?

Trojan.Waski.S28288290 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment