Categories: Trojan

What is “TrojanDownloader:Win32/Renos.PC”?

The TrojanDownloader:Win32/Renos.PC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Renos.PC virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine TrojanDownloader:Win32/Renos.PC?


File Info:
name: B61F9DC136DE0976CA15.mlwpath: /opt/CAPEv2/storage/binaries/df6c7571afe3d54b826485e89dd0483491659bbd5c8c4d619aa5b56326b9e5fccrc32: A7BAC42Emd5: b61f9dc136de0976ca157353a5bb979dsha1: b21d311bba4a92791178a87c6c9764252e1f9e5fsha256: df6c7571afe3d54b826485e89dd0483491659bbd5c8c4d619aa5b56326b9e5fcsha512: 66f08fb1d4cec71b272a09954b807b65d746ea94c45be2443c597ec6e7934cea4093357af72174fc3f2be6e387bb9f39369195bfbbcacd8c978f34947c88eed9ssdeep: 3072:Q+eWhH7nm/h69q4hd2+TM5EdO95S+eu2su14wzBnijH1h4c:QchH7nYR+ddM5X2bZijH1Jtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T13C04015A93C801F6E2732D79D1F5E190CB2EBC22B234DCAD5B97D3D92962041ACE0397sha3_384: f5bbcd1aba4f66e72992bd3709f78b5cd6e4708f4d772ab0f3564e4332a97d263fecc24f1edf5692a8b063e948d1bacfep_bytes: 558bec83c4eca1b8680010234df029catimestamp: 2009-03-31 03:14:42
Version Info:
Comments: CompanyName: Jordan RussellFileDescription: G Setup Self-Extractor dFileVersion: 3.0.0.0InternalName:  Windows setup rR.dllLegalCopyright: Copyright © 2010 D Setup Technologies LegalTrademarks: OriginalFilename:  Windows setup rR.dllProductName: 0H Internet Security UProductVersion: 3.0.0.0Translation: 0x0409 0x04e4

TrojanDownloader:Win32/Renos.PC also known as:

Bkav	W32.RenosQKBV.Fam.Trojan
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.419594
FireEye	Generic.mg.b61f9dc136de0976
CAT-QuickHeal	Trojan.Renos.LX
Skyhigh	BehavesLike.Win32.ObfuscatedPoly.cc
McAfee	Downloader-CEW.ai
Malwarebytes	Malware.AI.4142022902
VIPRE	Gen:Variant.Ulise.419594
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 0040f3cc1 )
Alibaba	TrojanDownloader:Win32/FraudPack.1c694867
K7GW	Trojan-Downloader ( 0040f3cc1 )
BitDefenderTheta	Gen:NN.ZedlaF.36802.ku8@aG04Lfci
VirIT	Trojan.Win32.SshNas.A
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.FakeAlert.BJE
APEX	Malicious
TrendMicro-HouseCall	TROJ_RENOS.SMRK
ClamAV	Win.Trojan.Agent-451050
Kaspersky	Trojan.Win32.FraudPack.crdy
BitDefender	Gen:Variant.Ulise.419594
NANO-Antivirus	Trojan.Win32.FraudPack.chvio
Avast	Win32:MalOb-EM [Cryp]
Rising	Downloader.Renos!8.1D0 (TFE:2:frPGxeYlXsQ)
Emsisoft	Gen:Variant.Ulise.419594 (B)
F-Secure	Trojan.TR/Crypt.ZPACK.Gen2
DrWeb	Trojan.DownLoader2.27288
Zillya	Trojan.FakeAV.Win32.56916
TrendMicro	TROJ_RENOS.SMRK
Sophos	Mal/FakeAV-IZ
Ikarus	Trojan-Downloader.Win32.FakeAlert
Jiangmin	Trojan/FraudPack.ahrj
ALYac	Gen:Variant.Ulise.419594
Webroot
Varist	W32/FakeAlert.MV.gen!Eldorado
Avira	TR/Crypt.ZPACK.Gen2
Antiy-AVL	Trojan/Win32.FraudPack
Kingsoft	Win32.Trojan.FraudPack.crdy
Microsoft	TrojanDownloader:Win32/Renos.PC
Xcitium	Malware@#2v6uahmt2639e
Arcabit	Trojan.Ulise.D6670A
ZoneAlarm	Trojan.Win32.FraudPack.crdy
GData	Gen:Variant.Ulise.419594
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/Fakeav.177152.AZ
VBA32	Trojan.FraudPack
Google	Detected
Cylance	unsafe
Panda	Trj/Genetic.gen
Tencent	Malware.Win32.Gencirc.10b91b15
Yandex	Trojan.GenAsa!N9L78qTuEgY
MAX	malware (ai score=100)
MaxSecure	Trojan.Malware.1911109.susgen
Fortinet	W32/Krypt.QKV!tr
AVG	Win32:MalOb-EM [Cryp]
DeepInstinct	MALICIOUS
alibabacloud	Trojan[downloader]:Win/FakeAlert.BJE