Categories: Trojan

Should I remove “TrojanDownloader:Win32/Renos.DS”?

The TrojanDownloader:Win32/Renos.DS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Renos.DS virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Renos.DS?


File Info:
name: 9B88E1E881F7365077B2.mlwpath: /opt/CAPEv2/storage/binaries/d0aa1a366e8035c9318f3052c4ee23a75f77ef98e2d341ab699f842645606649crc32: B86747FDmd5: 9b88e1e881f7365077b24f3fde037f06sha1: bef7c979a5739366ca755b8a42004f00608afc74sha256: d0aa1a366e8035c9318f3052c4ee23a75f77ef98e2d341ab699f842645606649sha512: 5cae5b5b5d2ee29c38fd9a879f27014813148549724d41742233a93ad5a411130b077b5e4be3f150ef29ef5a5eb6734338a458d1012485b5bcc28e2eb44cf769ssdeep: 768:6NJlNb/ija+1Iidqj9X8C6Py5LAb6FnEHU+dWwpE86Z8hDWc860ysg45nW6b/1x6:6NJ7KqBX8C6VyE0+lhp34M6bNWntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F6135B17F5D0CA37D032C8F58C16C594BAB77A302D3168AB39AE5FCCDEA81C2651D24Asha3_384: cefe7540b3350bd1031185662d5dd7284333a8d66cd98e2e015fa85aef5fada4148c829bca24e4dab66f63b09b024cdfep_bytes: 558bec83c4f0535657b8989a4000e871timestamp: 2008-07-24 06:59:00
Version Info:
0: [No Data]

TrojanDownloader:Win32/Renos.DS also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.322300
ClamAV	Win.Trojan.Delf-23605
McAfee	FakeAV-DZ
Cylance	unsafe
VIPRE	Gen:Variant.Zusy.322300
K7AntiVirus	Trojan-Downloader ( 0055e3da1 )
K7GW	Trojan-Downloader ( 0055e3da1 )
Cybereason	malicious.881f73
VirIT	Trojan.Win32.Generic.AYBS
Cyren	W32/Trojan.BCEA-6336
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/TrojanDownloader.Delf.OHL
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Trojan.Win32.Delf.fei
BitDefender	Gen:Variant.Zusy.322300
NANO-Antivirus	Trojan.Win32.Delf.cxbdrn
ViRobot	Trojan.Win32.Delf.44578
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.13acba97
Emsisoft	Gen:Variant.Zusy.322300 (B)
F-Secure	Dropper.DR/Delphi.Gen
DrWeb	Trojan.DownLoad.22946
Zillya	Trojan.Delf.Win32.26117
McAfee-GW-Edition	FakeAV-DZ
FireEye	Generic.mg.9b88e1e881f73650
GData	Gen:Variant.Zusy.322300
Jiangmin	TrojanDownloader.Agent.aink
Avira	DR/Delphi.Gen
Antiy-AVL	Trojan/Win32.Delf
Xcitium	TrojWare.Win32.Downloader.Ranos.~BAAB@fohe
Arcabit	Trojan.Zusy.D4EAFC
ZoneAlarm	Trojan.Win32.Delf.fei
Microsoft	TrojanDownloader:Win32/Renos.DS
Google	Detected
AhnLab-V3	Trojan/Win32.Xema.C118681
BitDefenderTheta	AI:Packer.1C0034C81F
ALYac	Gen:Variant.Zusy.322300
MAX	malware (ai score=88)
VBA32	Trojan.Delf
Rising	Trojan.Win32.Undef.qqm (CLASSIC)
Yandex	Trojan.GenAsa!iL/DENNjQT8
Ikarus	Trojan-Downloader.Win32.FraudLoad
MaxSecure	Trojan.Malware.772809.susgen
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_70% (W)