Categories: Trojan

How to remove “TrojanDownloader:Win32/Upatre.AJ”?

The TrojanDownloader:Win32/Upatre.AJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Upatre.AJ virus can do?

At least one process apparently crashed during execution
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

wpad.local-net

How to determine TrojanDownloader:Win32/Upatre.AJ?


File Info:
name: 24B2F550A2BF1C405DF5.mlwpath: /opt/CAPEv2/storage/binaries/eceb618cb51da3e7f9fd6e8ef22565f384058f4484621a4adb3d375d4efcb585crc32: 7E0E61A6md5: 24b2f550a2bf1c405df51f41460613fbsha1: 94aeb45510bb2b7a62f742156953554342890097sha256: eceb618cb51da3e7f9fd6e8ef22565f384058f4484621a4adb3d375d4efcb585sha512: 03e72bfe4524a899627a0f6c7ff94edab947bbcdc62d47940cb43ae81f64885205aee863f095e029adbba3156ebb9350ede2491ca14bc829d80283154be66fd9ssdeep: 384:fC+mYmeb63nddrtrp8dGptmxTeSmVpnkq:KZYmeb2nddxp8dGpkIV1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B6F24BD63F700F85CE5C0FF40C466B872A7A6E0639B6590AE706B29D2D3F809587719Asha3_384: 665a5db7b2e16d1f6a20f06734b80794b56bcb9f4fc35e0042d4adba9cbade33651389245de14a48b2b8a5c62e03723bep_bytes: 60bb000000008bdc6683c300b901ff00timestamp: 2014-11-02 18:53:34
Version Info:
0: [No Data]

TrojanDownloader:Win32/Upatre.AJ also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Agent.lvG0
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.1974141
FireEye	Generic.mg.24b2f550a2bf1c40
CAT-QuickHeal	TrojanDownloader.Upatre.AA3
McAfee	Generic.vd
Cylance	Unsafe
VIPRE	Win32.Malware!Drop
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	TrojanDownloader:Win32/Upatre.090f7555
K7GW	Trojan-Downloader ( 0048f6391 )
K7AntiVirus	Trojan-Downloader ( 0048f6391 )
Baidu	Win32.Trojan-Downloader.Waski.b
Cyren	W32/Trojan.MDZP-6596
Symantec	Downloader.Upatre
ESET-NOD32	Win32/TrojanDownloader.Waski.A
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Downloader.Win32.Upatre.dxz
BitDefender	Trojan.GenericKD.1974141
NANO-Antivirus	Trojan.Win32.Upatre.efhgpa
SUPERAntiSpyware	Trojan.Agent/Gen-Infector
Avast	Win32:Agent-AVHI [Trj]
Rising	Malware.FakePDF/ICON!1.A24C (CLASSIC)
Ad-Aware	Trojan.GenericKD.1974141
Sophos	Mal/Generic-R + Troj/Agent-AKBF
Comodo	Malware@#r3mno79gk13f
DrWeb	Trojan.DownLoader11.41838
Zillya	Downloader.Upatre.Win32.5790
TrendMicro	TROJ_SPNR.0BKH14
McAfee-GW-Edition	BehavesLike.Win32.Upatre.nt
Emsisoft	Trojan.GenericKD.1974141 (B)
Ikarus	Trojan-Spy.Zbot
Jiangmin	TrojanDownloader.Upatre.lu
eGambit	Generic.Malware
Avira	TR/Yarwi.A.39
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.CB6659
Kingsoft	Win32.TrojDownloader.Upatre.D.(kcloud)
Microsoft	TrojanDownloader:Win32/Upatre.AJ
GData	Win32.Trojan.Agent.STVSPZ
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.ZBot.R127324
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34294.cqW@aWpsE5f
ALYac	Trojan.GenericKD.1974141
VBA32	SScope.Malware-Cryptor.Hlux
Malwarebytes	Trojan.Email.FakeDoc
TrendMicro-HouseCall	TROJ_SPNR.0BKH14
Tencent	Win32.Trojan.Fakedoc.Auto
Yandex	Trojan.DL.Upatre!xlfMLUPILoo
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Upatre.HL!tr
Webroot	W32.Trojan.Gen
AVG	Win32:Agent-AVHI [Trj]
Cybereason	malicious.0a2bf1
Panda	Trj/WLT.B