Categories: Trojan

About “TrojanDownloader:Win32/Unruy.C” infection

The TrojanDownloader:Win32/Unruy.C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Unruy.C virus can do?

Executable code extraction
A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

www.bing.com

www2.megawebfind.com

www6.megawebfind.com

ocsp.pki.goog

d1hi41nc56pmug.cloudfront.net

s.symcd.com

ocsp.digicert.com

www2.megawebdeals.com

d1lxhc4jvstzrp.cloudfront.net

c.parkingcrew.net

iyfsearch.com

How to determine TrojanDownloader:Win32/Unruy.C?


File Info:
crc32: 18654255md5: 121089377c40d410813c46bf34137409name: upload_filesha1: 4ae02facb127779645d2294d906d810194b6f807sha256: 57fa3ba590122d7c0b0a2d76be493109caafd046eda585f52232ee7f5675d935sha512: a4f6a5a3111488f5a012ecfc0f8d3755f602e4f0f1b48b9d82296907211ef779a0ff9e34bcb0030aa79fe25f5c3188815a4d8c86c1d81476d221f3576a815016ssdeep: 24576:cTjs3WXYE1rBCU5Brb4fjmtxNvjnZgMNYL8j:qoUCeHX5jtNYLCtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

TrojanDownloader:Win32/Unruy.C also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Unruy.1
FireEye	Generic.mg.121089377c40d410
CAT-QuickHeal	Trojan.Mauvaise.SL1
McAfee	Downloader-BPA.j.b
Cylance	Unsafe
VIPRE	Trojan-Downloader.Win32.Unruy.C (v)
K7AntiVirus	Trojan-Downloader ( 005323c21 )
BitDefender	Gen:Variant.Unruy.1
K7GW	Trojan-Downloader ( 005323c21 )
Cybereason	malicious.77c40d
Invincea	ML/PE-A + Troj/Clickr-N
Baidu	Win32.Trojan-Clicker.Cycler.a
Cyren	W32/Trojan.UCRP-1793
Symantec	ML.Attribute.HighConfidence
TotalDefense	Win32/Cycler.A
APEX	Malicious
Avast	Win32:Unruy-AA [Trj]
ClamAV	Win.Trojan.Agent-190502
Kaspersky	Trojan-Clicker.Win32.Cycler.gq
NANO-Antivirus	Trojan.Win32.Cycler.vvftm
ViRobot	Trojan.Win32.Clicker.39446
Rising	Trojan.Unruy!1.AE5E (CLASSIC)
Ad-Aware	Gen:Variant.Unruy.1
Sophos	Troj/Clickr-N
Comodo	TrojWare.Win32.TrojanClicker.Cycler.GQ@1d3si3
F-Secure	Trojan.TR/Dldr.Agent.39446
DrWeb	Trojan.Inject3.24148
Zillya	Trojan.Cycler.Win32.3
TrendMicro	TROJ_UNRUY.SMT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tt
Emsisoft	Gen:Variant.Unruy.1 (B)
Ikarus	Trojan-Downloader.Win32.Unruy
Jiangmin	TrojanClicker.Cycler.f
Webroot	W32.Malware.Downloader
Avira	TR/Dldr.Agent.39446
MAX	malware (ai score=83)
Antiy-AVL	Trojan[Clicker]/Win32.Cycler
Microsoft	TrojanDownloader:Win32/Unruy.C
Arcabit	Trojan.Unruy.1
ZoneAlarm	Trojan-Clicker.Win32.Cycler.gq
GData	Gen:Variant.Unruy.1
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Cycler.R8362
Acronis	suspicious
VBA32	TrojanClicker.Cycler
ALYac	Gen:Variant.Unruy.1
Malwarebytes	Trojan.Unruy
Panda	Trj/Clicker.AQR
ESET-NOD32	Win32/TrojanDownloader.Unruy.AT
TrendMicro-HouseCall	TROJ_UNRUY.SMT
Tencent	Adware.Win32.Clicker.a
Yandex	Trojan.GenAsa!SjI7+I2F2TE
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Unruy.BK!tr.dldr
BitDefenderTheta	AI:Packer.4E49C0C51E
AVG	Win32:Unruy-AA [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM07.1.E3DB.Malware.Gen