Categories: Trojan

TrojanDownloader:Win32/Dowereys.A removal

The TrojanDownloader:Win32/Dowereys.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Dowereys.A virus can do?

Executable code extraction
Creates RWX memory
Steals private information from local Internet browsers
Exhibits behavior characteristic of Pony malware
Collects information about installed applications
Harvests credentials from local FTP client softwares
Harvests information related to installed mail clients
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

vyherectors.ru

How to determine TrojanDownloader:Win32/Dowereys.A?


File Info:
crc32: DBCA800Dmd5: 79477f3ad3948784238d9eb7544f29a3name: 79477F3AD3948784238D9EB7544F29A3.mlwsha1: ae6ec1586e3ea64d176355ddc4cd90861b2a39easha256: d53508c5b4e9d5b6be5544d49fe3ffdcf815d89970ab4c13ff345bd355bc71e4sha512: c31b33bf53b708295badadbe8a6bafede01285b895b9436f797b803dbace2e76bd4c831e07a681c0a74cf412de1b278e2ee47e48d54b64415abf4b0a1524994assdeep: 3072:hMV2Z3c3jv1D+txpdJ27nj10gUWLoB1pSDqMa12EACxsnNeO5fOdoG0Ukj:hA2g1i5I+gUaoP1ajNeO5fZtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Nullsoft, Inc. Copyright xfffd 1995-Present CompanyName: Nullsoft, Inc.ProductName: SecVirtueProductVersion: 4.2.6.5FileDescription: Solution YourOriginalFilename: SecVirtueTranslation: 0x0409 0x04b0

TrojanDownloader:Win32/Dowereys.A also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.PasswordStealer.GenericKD.41470703
McAfee	RDN/GenDownloader.db
Cylance	Unsafe
Sangfor	Malware
Alibaba	TrojanPSW:Win32/Tepfer.5259d046
K7GW	Trojan ( 004d40ae1 )
K7AntiVirus	Trojan ( 004d40ae1 )
Cyren	W32/Trojan.HBWO-6198
Symantec	Downloader.Ponik
ESET-NOD32	a variant of Win32/Kryptik.EAPB
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-PSW.Win32.Tepfer.psxajj
BitDefender	Trojan.PasswordStealer.GenericKD.41470703
NANO-Antivirus	Trojan.Win32.Yakes.dxyrep
AegisLab	Trojan.Win32.Yakes.mEqY
Tencent	Malware.Win32.Gencirc.114c6788
Ad-Aware	Trojan.PasswordStealer.GenericKD.41470703
Emsisoft	Trojan.PasswordStealer.GenericKD.41470703 (B)
Comodo	Malware@#4tybpalk0que
F-Secure	Heuristic.HEUR/AGEN.1123181
DrWeb	Trojan.PWS.Stealer.4118
Zillya	Trojan.Kryptik.Win32.808863
TrendMicro	TSPY_FAREIT.YYSNY
Sophos	Mal/Generic-R + Troj/DwnLdr-MWE
Jiangmin	Trojan.PSW.Tepfer.jld
Webroot	Trojan.Dropper.Gen
Avira	HEUR/AGEN.1123181
Antiy-AVL	Trojan/Win32.Yakes
Microsoft	TrojanDownloader:Win32/Dowereys.A
ZoneAlarm	Trojan-PSW.Win32.Tepfer.psxajj
GData	Trojan.PasswordStealer.GenericKD.41470703
AhnLab-V3	Trojan/Win32.Kovter.R165676
Acronis	suspicious
VBA32	Trojan.Yakes
ALYac	Trojan.PasswordStealer.GenericKD.41470703
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.3766496046
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TSPY_FAREIT.YYSNY
Rising	Downloader.Dowereys!8.84DD (TFE:5:tMkWWpjMuOD)
Yandex	Trojan.Kryptik!S86lrYWNKJc
Ikarus	Trojan.Win32.Crypt
eGambit	Generic.Malware
Fortinet	W32/Yakes.EAPB!tr
BitDefenderTheta	Gen:NN.ZexaF.34804.lC0@aCEZoPni
AVG	Win32:Malware-gen
Cybereason	malicious.ad3948
Avast	Win32:Malware-gen
Qihoo-360	Win32/Trojan.PSW.75f