Categories: Trojan

How to remove “TrojanDownloader:Win32/Small.AHY”?

The TrojanDownloader:Win32/Small.AHY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Small.AHY virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Touches a file containing cookies, possibly for information gathering
Yara detections observed in process dumps, payloads or dropped files

How to determine TrojanDownloader:Win32/Small.AHY?


File Info:
name: E00B122540D76602E08E.mlwpath: /opt/CAPEv2/storage/binaries/312c749057a7174fcb3dfb6defc2e900113e4195dd8b6774a2b8d1a4e8093b49crc32: B74B8539md5: e00b122540d76602e08effa7d460aaffsha1: 043fe08403761d79bb909ae73b76cfa3d66d0e6asha256: 312c749057a7174fcb3dfb6defc2e900113e4195dd8b6774a2b8d1a4e8093b49sha512: 34836554a821bac61ea2cdc1d793de75a6bffe6be75eb9b7a01c8b73988fbfea44c55b1fcc8a0fea7d56fd8d05efece12db9f2f76d931da92f9ec2fa9bd2bd85ssdeep: 12288:jhS+gdlCZuq56BaRTqYLHU3FY92KvhXHMwIZ:1J4CuqJqEHeiNvhXM/type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T16EF49E12F7D2C174C98F057028AB1B2F267DA69587685EC3D3985E0F6F623D287325CAsha3_384: ff2982044901f8c273b55c93ebbbe3d11a504f02c0a3fef32523c3e5a8ba795e2305fd9faaad38d70bfb0a8364b8ce5aep_bytes: 6a0c6890480510e8310b000033c04089timestamp: 2010-08-18 02:48:07
Version Info:
CompanyName: 360shadubaoshaFileDescription: 360baoshaFileVersion: 1, 0, 0, 1LegalCopyright: ProductName: setup1368ProductVersion: 1, 0, 0, 1Translation: 0x0804 0x04b0

TrojanDownloader:Win32/Small.AHY also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Kykymber.lmDX
MicroWorld-eScan	Gen:Variant.Adware.Graftor.13265
FireEye	Generic.mg.e00b122540d76602
Skyhigh	BehavesLike.Win32.Corrupt.bt
McAfee	GenericRXEQ-DA!E00B122540D7
Cylance	unsafe
Zillya	Adware.Adnur.Win32.381
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	TrojanDownloader:Win32/Adnur.94a37018
K7GW	Adware ( 004ba5501 )
K7AntiVirus	Adware ( 004ba5501 )
VirIT	Adware.Generic.AMMV
Symantec	Adware.Rugo
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.WSearch
APEX	Malicious
TrendMicro-HouseCall	TROJ_AGENT_020090.TOMB
ClamAV	Win.Adware.Adnur-1
Kaspersky	Trojan-Downloader.Win32.Adnur.wfw
BitDefender	Gen:Variant.Adware.Graftor.13265
NANO-Antivirus	Riskware.Win32.Adnur.ikoal
Avast	Win32:Agent-GRW [Trj]
Tencent	Malware.Win32.Gencirc.11498ed7
Emsisoft	Gen:Variant.Adware.Graftor.13265 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Adware.Siggen.14933
VIPRE	Gen:Variant.Adware.Graftor.13265
TrendMicro	TROJ_AGENT_020090.TOMB
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.Win32.Adnur
Jiangmin	Adware/Adnur.gz
Webroot	W32.Adware.Rugo
Google	Detected
Avira	TR/Crypt.XPACK.Gen
Varist	W32/AdLoad.M.gen!Eldorado
Antiy-AVL	Trojan[Downloader]/Win32.Adnur
Kingsoft	Win32.Troj.Undef.a
Microsoft	TrojanDownloader:Win32/Small.AHY
Xcitium	TrojWare.Win32.TrojanDownloader.Dadobra.~JH9@1qlqpa
Arcabit	Trojan.Adware.Graftor.D33D1
ZoneAlarm	Trojan-Downloader.Win32.Adnur.wfw
GData	Win32.Trojan.PSE.N540AG
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Adnur.R1483
VBA32	BScope.TrojanDownloader.Small
ALYac	Gen:Variant.Adware.Graftor.13265
MAX	malware (ai score=99)
Malwarebytes	WSearch.Adware.SearchHijacker.DDS
Panda	Trj/Genetic.gen
Rising	Adware.Agent!1.6A64 (CLASSIC)
Yandex	Trojan.GenAsa!sflTgUdrPps
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.1717517.susgen
Fortinet	W32/Adnur.A!tr
AVG	Win32:Agent-GRW [Trj]
DeepInstinct	MALICIOUS
alibabacloud	AdWare:Win/Adnur.wfw