How to remove “Trojan:Win32/FormatAll.H”?

The Trojan:Win32/FormatAll.H is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/FormatAll.H virus can do?

Behavioural detection: Executable code extraction – unpacking
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Trojan:Win32/FormatAll.H?


File Info:
name: E6321699954F8802684D.mlw
path: /opt/CAPEv2/storage/binaries/fdab7302fb0352d3e1ee5500755a7b539d4b36c5e95a476f93ef1f6ab0db35c4
crc32: D641894E
md5: e6321699954f8802684d96f6f2872da9
sha1: 32f681f0ac84ec9bf68b9852aab137826a46568a
sha256: fdab7302fb0352d3e1ee5500755a7b539d4b36c5e95a476f93ef1f6ab0db35c4
sha512: 5a362b94afa88546ba361fe43c59b3abf010bc2edffeacfb697585eca88c7c17e1bdb0a456d2481971961eddd995c0c208783aaa5619ec3c843902104a1d53bb
ssdeep: 96:/lx8GSKUpACLFhWX3vM0hui6hEQOgHg4NqGlSSnX1jSSKUpACLFhWX3:/ToKUpt8HhQhBhHg4NI8ljdKUpt8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T164B2FD021B3D3780E09BC2392DE645A94EF6FC16B8369D5322915D0E0CA2DC9FEB5727
sha3_384: bdc40f3f41cbb19e01e3dd42918542319c39a10e111e15216a14e0888d08253d62b655dbc56d526eea1d5f0001604de9
ep_bytes: 684c1b4000e8eeffffff000000000000
timestamp: 2007-05-16 04:40:10

Version Info:
Translation: 0x0804 0x04b0
CompanyName: 赛腾军事联盟
ProductName: 工程1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: 破壳蜗牛
OriginalFilename: 破壳蜗牛.exe

Trojan:Win32/FormatAll.H also known as:

Lionic	Trojan.Win32.FormatAll.4!c
MicroWorld-eScan	Generic.Malware.V2.ED954EB1
FireEye	Generic.Malware.V2.ED954EB1
McAfee	Artemis!E6321699954F
Cylance	Unsafe
VIPRE	Generic.Malware.V2.ED954EB1
Alibaba	Trojan:Win32/FormatAll.a5bf65c3
Cybereason	malicious.9954f8
VirIT	Trojan.Win32.Generic.PNH
Cyren	W32/Trojan.UTKM-3196
Symantec	Backdoor.Ratenjay
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/FormatAll.D
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Trojan.Win32.FormatAll.o
BitDefender	Generic.Malware.V2.ED954EB1
NANO-Antivirus	Trojan.Win32.FormatAll.svma
Avast	Win32:FormatAll-D [Trj]
Tencent	Win32.Trojan.Formatall.Agow
Ad-Aware	Generic.Malware.V2.ED954EB1
TACHYON	Trojan/W32.VB-FormatAll.24576
Emsisoft	Generic.Malware.V2.ED954EB1 (B)
Comodo	TrojWare.Win32.Trojan.VB.~ZX@jh4z
DrWeb	Trojan.FormatAll.9134
Zillya	Trojan.FormatAll.Win32.31
McAfee-GW-Edition	BehavesLike.Win32.Trojan.mz
CMC	Generic.Win32.e632169995!MD
Ikarus	Trojan.Win32.FormatAll
GData	Generic.Malware.V2.ED954EB1
Jiangmin	Trojan/FormatAll.n
Webroot	W32.Trojan.Trojan.Gen.X
Avira	TR/Brambureala
Antiy-AVL	Trojan/Generic.ASMalwS.15BE
Kingsoft	Win32.Troj.FormatAll.o.(kcloud)
Arcabit	Generic.Malware.V2.ED954EB1
ViRobot	Trojan.Win32.A.FormatAll.24576
Microsoft	Trojan:Win32/FormatAll.H
Google	Detected
VBA32	BScope.Trojan.Occamy
ALYac	Generic.Malware.V2.ED954EB1
MAX	malware (ai score=100)
Rising	Trojan.Win32.KillTask.a (CLASSIC)
Yandex	Trojan.Formatall!JBV4Mr9A8tQ
MaxSecure	Trojan.Malware.694329.susgen
Fortinet	W32/FormatAll.O!tr
BitDefenderTheta	Gen:NN.ZevbaF.34682.bm0@a8GMcvcb
AVG	Win32:FormatAll-D [Trj]
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Trojan:Win32/FormatAll.H?

Trojan:Win32/FormatAll.H removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X