Categories: Trojan

Trojan:Win32/Derusbi!rfn information

The Trojan:Win32/Derusbi!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Derusbi!rfn virus can do?

A file was accessed within the Public folder.
Uses Windows utilities for basic functionality
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Uses suspicious command line tools or Windows utilities

How to determine Trojan:Win32/Derusbi!rfn?


File Info:
name: 1CB673679F37B6A3F482.mlwpath: /opt/CAPEv2/storage/binaries/b690394540cab9b7f8cc6c98fd95b4522b84d1a5203b19c4974b58829889da4ccrc32: EC1377F4md5: 1cb673679f37b6a3f482bb59b52423absha1: b630b7a8fe065e1a6f51ee74869b3938dc411126sha256: b690394540cab9b7f8cc6c98fd95b4522b84d1a5203b19c4974b58829889da4csha512: d673897fd765f98895cf58fc3400b23c9757faf3d9b9aeaaed0b509918d3e8fe52e31eadd9442010d7ac0ee98a2e6f6626157c5aeb7b7989eb17904b24a963f0ssdeep: 1536:OJix38oPiU1NzMKVOTvczEI9zCK6vA3eRUsOcfKnwBPqZ5jnGYbH7ztqsk2W8:Owx3lJQDcL56Gee6ZUjHbk2Wtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1E9C37E1171A0C0B2C0AA163C5475C7739F7F783165B94487ABA42ABE6FB03D19B7938Asha3_384: eb0cdbd7fe524fc1054ff0b1e210fe6460d768cae6649b5ed28ca77fdcc4ed1399d3824b6fa393b2d326faf0ccb5ed07ep_bytes: 8bff558bec837d0c017505e8f34d0000timestamp: 2015-07-15 09:38:15
Version Info:
CompanyName: Microsoft CorporationFileDescription: Windows Symbolic Debugger EngineFileVersion: 6.1.7601.17514 InternalName: DbgEng.DllLegalCopyright: © Microsoft Corporation. All rights reserved.OriginalFilename: DbgEng.DllProductName: Microsoft® Visual Studio® 2010ProductVersion: 6.1.7601.17514Translation: 0x0409 0x04b0

Trojan:Win32/Derusbi!rfn also known as:

Bkav	W32.Common.CF031796
Lionic	Trojan.Win32.Derusbi.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	DeepScan:Generic.Malware.SFYBd.5494DADD
CAT-QuickHeal	Trojan.Zapchast
Skyhigh	GenericRXCE-LG!1CB673679F37
McAfee	GenericRXCE-LG!1CB673679F37
Cylance	unsafe
Zillya	Trojan.Derusbi.Win32.27
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Zapchast.c7605ef2
K7GW	Trojan ( 004cd4441 )
K7AntiVirus	Trojan ( 004cd4441 )
Arcabit	DeepScan:Generic.Malware.SFYBd.D1576DADD
BitDefenderTheta	Gen:NN.ZedlaF.36680.hu8@ai3CTNoi
VirIT	Trojan.Win32.Agent5.AFUA
Symantec	Downloader.Busadom.B
ESET-NOD32	a variant of Win32/Derusbi.S
Cynet	Malicious (score: 99)
ClamAV	Win.Trojan.Agent-5807607-0
Kaspersky	Trojan.Win32.Zapchast.ahhh
BitDefender	DeepScan:Generic.Malware.SFYBd.5494DADD
NANO-Antivirus	Trojan.Win32.Derusbi.dxkrwe
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.114e8d29
Emsisoft	DeepScan:Generic.Malware.SFYBd.5494DADD (B)
F-Secure	Backdoor.BDS/Derusbi.126976
DrWeb	Trojan.Siggen11.56825
VIPRE	DeepScan:Generic.Malware.SFYBd.5494DADD
TrendMicro	TSPY_DERUSBI.AS
Sophos	Mal/Generic-R
Ikarus	Backdoor.Derusbi
Jiangmin	Trojan.Zapchast.ik
Webroot	W32.Malware.Gen
Avira	BDS/Derusbi.126976
Antiy-AVL	Trojan/Win32.Apt19
Kingsoft	malware.kb.a.948
Xcitium	Malware@#21wuxejy9bc7y
Microsoft	Trojan:Win32/Derusbi!rfn
ZoneAlarm	Trojan.Win32.Zapchast.ahhh
GData	DeepScan:Generic.Malware.SFYBd.5494DADD
AhnLab-V3	Trojan/Win32.Agent.R173655
VBA32	Trojan.Zapchast
ALYac	Trojan.Zapchast
Malwarebytes	Malware.AI.2643001725
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TSPY_DERUSBI.AS
Rising	Backdoor.Derusbi!1.C54F (CLASSIC)
Yandex	Trojan.GenAsa!pOm4lN9icp8
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Derusbi.S!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS