Categories: Trojan

What is “TrojanDownloader:Win32/Tearspear”?

The TrojanDownloader:Win32/Tearspear is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Tearspear virus can do?

Unconventionial language used in binary resources: Portuguese (Brazilian)
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine TrojanDownloader:Win32/Tearspear?


File Info:
name: D3CD86E033C4B601A810.mlwpath: /opt/CAPEv2/storage/binaries/0a2436af01d4b052bb2c510feea747b25bd0eda85fd3078be1c2d5d79073b3edcrc32: 00C2883Bmd5: d3cd86e033c4b601a8108a120c8b513bsha1: c9e8e42fee25fcb5f1aa5d1b75e5858e4dd8c8desha256: 0a2436af01d4b052bb2c510feea747b25bd0eda85fd3078be1c2d5d79073b3edsha512: c6a1aeaa3fcffd2e3d396b8197d9aefef0d3bbc63c3cea2d9cdded7f663e5c458998dedebd1dc8034dc641e875cb92bd62da0047f80d4d8568ec978adede71edssdeep: 768:nHvqBtc7ojVcOcb5E/pnGDS779CqpixgAUlF7z9ve:POtNjVcOcb5E/UDG9/paRS1zgtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T16503F9123300C6B3C6994C70D84B9EF45974DD61E7158277ABC0FE9EB8723B06E25A2Bsha3_384: c5c9e2314ef96f927cb39fd4099ff449666f41e52618abaf52a4e38a011d454a3129899d38bab620c6c8f0c225ed262dep_bytes: 5589e583ec08c7042401000000ff15a4timestamp: 2009-02-24 01:16:01
Version Info:
0: [No Data]

TrojanDownloader:Win32/Tearspear also known as:

Lionic	Trojan.Win32.Agent.a!c
MicroWorld-eScan	Gen:Trojan.Heur.GC.cyW@qzGrwGkGz
FireEye	Generic.mg.d3cd86e033c4b601
Skyhigh	GenDownloader.dw
ALYac	Gen:Trojan.Heur.GC.cyW@qzGrwGkGz
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Trojan.Heur.GC.cyW@qzGrwGkGz
Sangfor	Downloader.Win32.Banload.Varf
K7AntiVirus	Trojan-Downloader ( 0007bd9b1 )
BitDefender	Gen:Trojan.Heur.GC.cyW@qzGrwGkGz
K7GW	Trojan-Downloader ( 0007bd9b1 )
Cybereason	malicious.fee25f
BitDefenderTheta	AI:Packer.EA97119F20
VirIT	Trojan.Win32.X-Roxy.BF
Symantec	Downloader
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Banload.OBZ
APEX	Malicious
ClamAV	Win.Downloader.63757-1
Kaspersky	Trojan-Downloader.Win32.Agent.bith
Alibaba	TrojanDownloader:Win32/Banload.6aa56bf1
NANO-Antivirus	Trojan.Win32.Agent.tjsid
Rising	Downloader.Banload!8.15B (TFE:5:x8iNQmfVbiU)
Sophos	Mal/DownLdr-AC
F-Secure	Trojan.TR/Crypt.CFI.Gen
DrWeb	Trojan.DownLoad.35635
Zillya	Downloader.Agent.Win32.5991
TrendMicro	TROJ_GEN.R002C0OJN23
Emsisoft	Gen:Trojan.Heur.GC.cyW@qzGrwGkGz (B)
Ikarus	Trojan-Downloader.Win32.Banload
GData	Gen:Trojan.Heur.GC.cyW@qzGrwGkGz
Jiangmin	TrojanDownloader.Banload.xde
Google	Detected
Avira	TR/Crypt.CFI.Gen
Varist	W32/Heuristic-217!Eldorado
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Kingsoft	Win32.Trojan.Generic.a
Xcitium	Malware@#etz92lo3itp7
Arcabit	Trojan.Heur.GC.ED109AE
ZoneAlarm	Trojan-Downloader.Win32.Agent.bith
Microsoft	TrojanDownloader:Win32/Tearspear
Cynet	Malicious (score: 100)
McAfee	GenDownloader.dw
MAX	malware (ai score=100)
DeepInstinct	MALICIOUS
VBA32	TrojanDownloader.Agent
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R002C0OJN23
Tencent	Win32.Trojan-Downloader.Agent.Zchl
Yandex	Trojan.GenAsa!pD0V69rryXA
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.1188006.susgen
Fortinet	W32/Delf.SSV!tr.dldr
AVG	Win32:DropperX-gen [Drp]
Avast	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_90% (W)