What is “Trojan:Win32/Clustinex!C”?

The Trojan:Win32/Clustinex!C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Clustinex!C virus can do?

• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses suspicious command line tools or Windows utilities

How to determine Trojan:Win32/Clustinex!C?

File Info:
name: 908D6DD77EFE957978C2.mlw
path: /opt/CAPEv2/storage/binaries/68e7372bebfebfc68efb38c360e45f43190a97132ace6df8155298e5897c679f
crc32: 1B31E463
md5: 908d6dd77efe957978c241e345f8d956
sha1: ce9b569460e6980bc58efbb8bc99d69dd8af7abb
sha256: 68e7372bebfebfc68efb38c360e45f43190a97132ace6df8155298e5897c679f
sha512: d2c9fbd14d1ff48ee0f9a69e2f3fa50d90df14f26986a3b213f6d8af86b9b2531165181e7beef670275c84d3048c1ea362a189f12fef898ac89cc3609254c575
ssdeep: 98304:bhsgFKPCftISOs+mskZSDEcil6ox1gOe8oRXyZkHs1chKWrwmZi8PW9:dHKKlIvs+msmSDLil6ox1pe3XMkHGchS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T135362322F3918437D0221A3D9DAB86B5A53ABF112E38B9877FE81D0D5F386C13915397
sha3_384: 3445475b63d9161ea28039f06676c09b82b0aa2d5ab75b05335fc212bd23fd7548d662b290954ac514f6ce09d44517d5
ep_bytes: 558bec83c4e033c08945e08945ec8945
timestamp: 2010-11-30 02:54:48

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: setup
ProductVersion: 1.0.0.0
Comments: 
Translation: 0x0804 0x03a8

Trojan:Win32/Clustinex!C also known as:

How to remove Trojan:Win32/Clustinex!C?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.