TrojanDownloader:Win32/Waledac.AJ removal tips

The TrojanDownloader:Win32/Waledac.AJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Waledac.AJ virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Attempts to connect to a dead IP:Port (54 unique times)
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Waledac.AJ?

File Info:
name: A7FB0C059DB77C0724E1.mlw
path: /opt/CAPEv2/storage/binaries/0afa64ba7b3a4573ded9ea24510cbddba2e83e02abd2636cbb494e659da00efb
crc32: D2AD4F44
md5: a7fb0c059db77c0724e13ea027a5da04
sha1: 04202589a60252d403086b278b9de0cbe44c6f7a
sha256: 0afa64ba7b3a4573ded9ea24510cbddba2e83e02abd2636cbb494e659da00efb
sha512: a5f0d2a6904214ad452208ef70e08b24f9ede35ff6c8ae469d6dd8d569de41af7f6fdbfd94bd6cb61be1d2f5018cf38e7cb7d4b61084c3358fbc29e10bf45442
ssdeep: 384:IOPgcg1QRt1e+JwZOiNbHmpnCC9plvke:v9gui+2Okipr5ke
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19CE2CA92DADC0776D9A2AA7237F23E28C17C350240947C14BE3D68A9F71FBD68611787
sha3_384: 71c23ff861aadfcb1e78931e9d7c7f438b963c9a7396302f3052d4e172b31d301efdd72f70fe5d2604f864faca85cecc
ep_bytes: 90908bc4663d00f6724c68874fbfff59
timestamp: 2010-07-13 12:44:29

Version Info:
0: [No Data]

TrojanDownloader:Win32/Waledac.AJ also known as:

How to remove TrojanDownloader:Win32/Waledac.AJ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.