Trojan

TrojanDownloader.Waski (file analysis)

Malware Removal

The TrojanDownloader.Waski is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader.Waski virus can do?

  • Anomalous binary characteristics

How to determine TrojanDownloader.Waski?


File Info:

crc32: 3D3637FD
md5: 2b98d00322f390e8f600ede27fd92dc9
name: 2B98D00322F390E8F600EDE27FD92DC9.mlw
sha1: bdff487d7199d04803e1efed04620bae610e0555
sha256: 1e67ae0a777f177a5b8c245f30e5f6f34ad09aa4d5ab4ec555cebf06d1eec81c
sha512: b9a1e04aba967f65d72acd5e2ebb8eeeb8717e02fe27321f616819a074b5d6cb97cc82cb0cea0faba395a800c27636a962b6bd382caac39a7da5dcb955f950bf
ssdeep: 192:uxqO9CQWRIgMxI5IOW9gbIflMQ2wGIc78:ux0QWRIgehlMQ2vo
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

TrojanDownloader.Waski also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan-Downloader ( 0048f6391 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoad3.28161
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.Ppatre.Gen.1
CylanceUnsafe
ZillyaDownloader.SmallGen.Win32.2
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan-Downloader ( 0048f6391 )
Cybereasonmalicious.322f39
CyrenW32/Upatre.LI.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Waski.A
APEXMalicious
AvastWin32:Waski-A [Trj]
ClamAVWin.Downloader.Upatre-9885523-0
KasperskyVHO:Trojan-Spy.Win32.Zbot.gen
BitDefenderTrojan.Ppatre.Gen.1
NANO-AntivirusTrojan.Win32.DownLoad3.gmvejg
MicroWorld-eScanTrojan.Ppatre.Gen.1
TencentTrojan.Win32.Waski.b
Ad-AwareTrojan.Ppatre.Gen.1
SophosML/PE-A + Mal/EncPk-ACO
ComodoTrojWare.Win32.TrojanDownloader.Waski.AQ@7t0jau
BitDefenderThetaGen:NN.ZexaF.34236.auX@a0oO!xmi
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_UPATRE.SM37
McAfee-GW-EditionBehavesLike.Win32.Generic.lt
FireEyeGeneric.mg.2b98d00322f390e8
EmsisoftTrojan.Ppatre.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Waski.b
AviraHEUR/AGEN.1136562
Antiy-AVLTrojan/Generic.ASMalwS.2FF2E77
MicrosoftTrojan:Win32/Waski.A!MTB
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
ZoneAlarmHEUR:Trojan-Downloader.Win32.Waski.gen
GDataWin32.Trojan.PSE.1EQ1P6C
AhnLab-V3Trojan/Win32.Upatre.R258184
Acronissuspicious
McAfeeDownloader-FML!2B98D00322F3
MAXmalware (ai score=86)
VBA32TrojanDownloader.Waski
MalwarebytesTrojan.Upatre
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SM37
RisingTrojan.Generic@ML.100 (RDML:wiCGY8ZsIDgLgI/GZRWFYA)
YandexTrojan.DL.Waski!TD7KsVCvjoI
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Upatre.Gen
FortinetW32/Waski.A!tr
AVGWin32:Waski-A [Trj]

How to remove TrojanDownloader.Waski?

TrojanDownloader.Waski removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment