Categories: Trojan

About “TrojanClicker:Win32/Clikug.C” infection

The TrojanClicker:Win32/Clikug.C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanClicker:Win32/Clikug.C virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid

How to determine TrojanClicker:Win32/Clikug.C?


File Info:
name: 0AA8D777A2356F04620B.mlwpath: /opt/CAPEv2/storage/binaries/edf771dfdf9d3560c4dcbd4bcea667b44bb0d65b73d9f79bcae4e99e01ecfaa7crc32: E6E0664Amd5: 0aa8d777a2356f04620b08eb8e269322sha1: 01675e2cbd3a576ea260a6893383d019c960586dsha256: edf771dfdf9d3560c4dcbd4bcea667b44bb0d65b73d9f79bcae4e99e01ecfaa7sha512: e64ab645281422e75bc9f01bf1f854a94b1d9dd67c6a96810ce9b6453201ec6f1611992c424b14e8e80a69e85cbeab35a3911539da652dfc0b36bbbb9b3aa8d9ssdeep: 24576:XWv5dh/XSIFeDffKBIITnUYgSXrJY7Lgi90U21Tnzt6712wU6aqJNek:uSIQDKdUmtYXgiOUatQ1naktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12D6533C064E5A663CBC00734457897F6172A9F2CF0724A58776BAC0F7D32B66A372276sha3_384: 316db5b96755c41a51ce8709dd01473ab4eb43bcfdd6f5b9063854323a5b18688d1ebc99ce27b2d197cea3c435a92e16ep_bytes: 81ecd4020000535556576a2033ed5e89timestamp: 2013-12-25 05:01:49
Version Info:
Comments: Idle-Crawler web spiderCompanyName: web research foundationFileDescription: Setup ApplicationFileVersion: 59.0.0.407InternalName: Idle-Crawler InstallerLegalCopyright: © web research foundationLegalTrademarks: Idle-Crawler is a trademark of web research foundationPrivateBuild: e8cc223b5e92490aa9bee9d411b61eb8ProductName: Idle-CrawlerProductVersion: 1.0.0.0Translation: 0x0409 0x04b0

TrojanClicker:Win32/Clikug.C also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.355148
FireEye	Generic.mg.0aa8d777a2356f04
McAfee	Artemis!0AA8D777A235
Sangfor	Trojan.Win32.Agent.cbho
Cybereason	malicious.7a2356
VirIT	Trojan.Win32.KillFiles.XGD
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/GigaClicks.AR potentially unwanted
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Agent-1140576
Kaspersky	Trojan-Clicker.Win32.Agent.cbho
BitDefender	Gen:Variant.Zusy.355148
NANO-Antivirus	Trojan.Win32.Agent.dfmkdv
Avast	Win32:Dropper-gen [Drp]
Tencent	Win32.Trojan.Agent.Hpg
Sophos	Mal/Generic-S + Idle Crawler (PUA)
Comodo	Malware@#29nt9bv8fquw5
DrWeb	Trojan.Click3.8830
TrendMicro	TROJ_SPNR.0BHG14
Emsisoft	Gen:Variant.Zusy.355148 (B)
GData	Gen:Variant.Zusy.355148
Jiangmin	TrojanClicker.Agent.ifx
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan[Clicker]/JS.Agent.pp
Gridinsoft	Ransom.Win32.Wacatac.sa
ZoneAlarm	Trojan-Clicker.Win32.Agent.cbho
Microsoft	TrojanClicker:Win32/Clikug.C
Cynet	Malicious (score: 99)
BitDefenderTheta	Gen:NN.ZexaF.34212.ByW@a0Sah6ni
ALYac	Gen:Variant.Zusy.355148
MAX	malware (ai score=88)
VBA32	TrojanClicker.Agent
Malwarebytes	PUP.Optional.IdleCrawler
TrendMicro-HouseCall	TROJ_SPNR.0BHG14
Rising	Trojan.Clicker-Clikug!8.3B7 (TOPIS:E0:j8hGPiWGK5J)
Yandex	Trojan.Kazy!U0wjUYdOdbA
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Agent.CBIM!tr
AVG	Win32:Dropper-gen [Drp]
Panda	Trj/Genetic.gen