Trojan

What is “Trojan:Win32/Carberp.I”?

Malware Removal

The Trojan:Win32/Carberp.I is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Carberp.I virus can do?

  • The executable is compressed using UPX

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Carberp.I?


File Info:

crc32: 03D7D504
md5: 873f3d1dd960715b0c58721e43dd00f3
name: 873F3D1DD960715B0C58721E43DD00F3.mlw
sha1: 2a421adceb9692a4661782c2bc97accd49d52048
sha256: 71e3961d95091fe1dd5d2d0a94b271bb6bc210112840c023b899b9f919cb55e8
sha512: e6609cfbc1327c5410102aec1814594c61ac43886f2189b74290ba8155a2ba524ae90872cec51cbd3e5564f70efeab1de1e526de43b754c61c3f42d8492c17cb
ssdeep: 768:xsN6yUCtMeJ6rRDmvgMx9FvZes3ycg7P7h0+q4qhF/reDGbCoXJ:y6yceJYDapoJ7PdbqVNreDK
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan:Win32/Carberp.I also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004bcce41 )
LionicTrojan.Win32.Graftor.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.676886
CylanceUnsafe
SangforTrojan.Win32.Glupteba.B
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Carberp.5ce1fd9c
K7GWTrojan ( 004bcce41 )
Cybereasonmalicious.dd9607
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Glupteba-B [Trj]
BitDefenderGen:Variant.Razy.676886
ViRobotTrojan.Win32.Z.Razy.69632.TX
MicroWorld-eScanGen:Variant.Razy.676886
TencentWin32.Trojan.Patched.Dzjz
Ad-AwareGen:Variant.Razy.676886
SophosMal/Generic-S
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaAI:Packer.BD1CD9DD1E
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0DJ121
McAfee-GW-EditionBehavesLike.Win32.Sodinokibi.kt
FireEyeGeneric.mg.873f3d1dd960715b
EmsisoftGen:Variant.Razy.676886 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Patched.Ren.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Win32.Carberp
MicrosoftTrojan:Win32/Carberp.I
GDataGen:Variant.Razy.676886
Acronissuspicious
McAfeeRDN/Generic Downloader.x
MAXmalware (ai score=88)
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DJ121
RisingDownloader.Carberp!1.9E70 (CLASSIC)
IkarusWorm.Socks
MaxSecureTrojan.Malware.10060888.susgen
FortinetW32/Dloader.X!tr
AVGWin32:Glupteba-B [Trj]
Paloaltogeneric.ml

How to remove Trojan:Win32/Carberp.I?

Trojan:Win32/Carberp.I removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment