Categories: Trojan

Trojan:Win32/Bumat!rfn information

The Trojan:Win32/Bumat!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Bumat!rfn virus can do?

Executable code extraction
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Unconventionial language used in binary resources: Spanish (Modern)
The binary likely contains encrypted or compressed data.
Sniffs keystrokes
Checks for the presence of known windows from debuggers and forensic tools
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/Bumat!rfn?


File Info:
crc32: 2D22A2F4md5: 482c39e218ec6f524180b6a06a4684dbname: Serious-Sam-HD-The-Second-Encounter-v1.1-10-Trainer.exesha1: 69b96cb85ce7b738488727c82234b66be8cce2fdsha256: 13aa58decb7ab25277bb0ff76dbef024b6c1d9374492e4500c0b1dc69283daf3sha512: 600ad3592e15821840bd860b8a8a42e002b826a1ce9ad6f90dcc3b6d9eacd17f6d6c6d9ae5f97bc6ef446d52f2d72d1bb5043d08b559d803c14693670f9c1923ssdeep: 12288:TCuO9tGAxT+cJFQJEeOK/Z9vHkdJqykZAvmR0gm3bzB7g9Kg1NTjCzxe8M2FXaq0:TCusd/LK/nHNyuZmPBfgL+gJyaqikgtype: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
Version Info:
LegalCopyright: www.sicheats.comInternalName: SC Engine TrainerFileVersion: 2.3.1.2388CompanyName: www.sicheats.comLegalTrademarks: www.sicheats.comComments: www.sicheats.comProductName: www.sicheats.comProductVersion: 2.3SC Engine Homepage: http://www.sicheats.com/FileDescription: SC Engine TrainerThanks to: DarkByteOriginalFilename: SC TrainerDescription: SC Engine TrainerTranslation: 0x040a 0x04e4

Trojan:Win32/Bumat!rfn also known as:

MicroWorld-eScan	Trojan.Generic.4170845
FireEye	Trojan.Generic.4170845
McAfee	Artemis!482C39E218EC
Cylance	Unsafe
Zillya	Trojan.VkHost.Win32.345
K7AntiVirus	Hacktool ( 0048bc581 )
BitDefender	Trojan.Generic.4170845
K7GW	Hacktool ( 0048bc581 )
Cybereason	malicious.218ec6
TrendMicro	TROJ_GEN.F43EZK8
F-Prot	W32/MalwareF.EFSI
APEX	Malicious
ClamAV	Win.Trojan.Vkhost-553
GData	Trojan.Generic.4170845
Alibaba	HackTool:Win32/CheatEngine.ff260694
AegisLab	Trojan.Win32.Generic.4!c
Rising	Trojan.Bumat!8.710 (CLOUD)
Endgame	malicious (moderate confidence)
Sophos	CheatEngine (PUA)
Comodo	Malware@#33oy7lle05bux
F-Secure	Trojan.TR/VKHost.ajy
VIPRE	Trojan.Win32.Delf.abt (fs)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.PUP.cc
MaxSecure	Trojan.Malware.464766.susgen
Emsisoft	Trojan.Generic.4170845 (B)
Ikarus	Trojan-PWS.Win32.VKont
Cyren	W32/Risk.QPOS-1256
Jiangmin	Trojan/AdwareRemover.n
Webroot	W32.Malware.Gen
Avira	TR/VKHost.ajy
MAX	malware (ai score=99)
Microsoft	Trojan:Win32/Bumat!rfn
Arcabit	Trojan.Generic.D3FA45D
ALYac	Trojan.Generic.4170845
TACHYON	Trojan/W32.VkHost.916622
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/HackTool.CheatEngine.AB potentially unsafe
TrendMicro-HouseCall	TROJ_GEN.F43EZK8
Tencent	Win32.Trojan.Gen.Pbpk
Yandex	HackTool.CheatEngine!4HkJM0juWSc
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/CheatEngine
Ad-Aware	Trojan.Generic.4170845