Categories: Trojan

How to remove “Trojan:Win32/FormatAll.H”?

The Trojan:Win32/FormatAll.H is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/FormatAll.H virus can do?

Behavioural detection: Executable code extraction – unpacking
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Trojan:Win32/FormatAll.H?


File Info:
name: E6321699954F8802684D.mlwpath: /opt/CAPEv2/storage/binaries/fdab7302fb0352d3e1ee5500755a7b539d4b36c5e95a476f93ef1f6ab0db35c4crc32: D641894Emd5: e6321699954f8802684d96f6f2872da9sha1: 32f681f0ac84ec9bf68b9852aab137826a46568asha256: fdab7302fb0352d3e1ee5500755a7b539d4b36c5e95a476f93ef1f6ab0db35c4sha512: 5a362b94afa88546ba361fe43c59b3abf010bc2edffeacfb697585eca88c7c17e1bdb0a456d2481971961eddd995c0c208783aaa5619ec3c843902104a1d53bbssdeep: 96:/lx8GSKUpACLFhWX3vM0hui6hEQOgHg4NqGlSSnX1jSSKUpACLFhWX3:/ToKUpt8HhQhBhHg4NI8ljdKUpt8type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T164B2FD021B3D3780E09BC2392DE645A94EF6FC16B8369D5322915D0E0CA2DC9FEB5727sha3_384: bdc40f3f41cbb19e01e3dd42918542319c39a10e111e15216a14e0888d08253d62b655dbc56d526eea1d5f0001604de9ep_bytes: 684c1b4000e8eeffffff000000000000timestamp: 2007-05-16 04:40:10
Version Info:
Translation: 0x0804 0x04b0CompanyName: 赛腾军事联盟ProductName: 工程1FileVersion: 1.00ProductVersion: 1.00InternalName: 破壳蜗牛OriginalFilename: 破壳蜗牛.exe

Trojan:Win32/FormatAll.H also known as:

Lionic	Trojan.Win32.FormatAll.4!c
MicroWorld-eScan	Generic.Malware.V2.ED954EB1
FireEye	Generic.Malware.V2.ED954EB1
McAfee	Artemis!E6321699954F
Cylance	Unsafe
VIPRE	Generic.Malware.V2.ED954EB1
Alibaba	Trojan:Win32/FormatAll.a5bf65c3
Cybereason	malicious.9954f8
VirIT	Trojan.Win32.Generic.PNH
Cyren	W32/Trojan.UTKM-3196
Symantec	Backdoor.Ratenjay
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/FormatAll.D
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Trojan.Win32.FormatAll.o
BitDefender	Generic.Malware.V2.ED954EB1
NANO-Antivirus	Trojan.Win32.FormatAll.svma
Avast	Win32:FormatAll-D [Trj]
Tencent	Win32.Trojan.Formatall.Agow
Ad-Aware	Generic.Malware.V2.ED954EB1
TACHYON	Trojan/W32.VB-FormatAll.24576
Emsisoft	Generic.Malware.V2.ED954EB1 (B)
Comodo	TrojWare.Win32.Trojan.VB.~ZX@jh4z
DrWeb	Trojan.FormatAll.9134
Zillya	Trojan.FormatAll.Win32.31
McAfee-GW-Edition	BehavesLike.Win32.Trojan.mz
CMC	Generic.Win32.e632169995!MD
Ikarus	Trojan.Win32.FormatAll
GData	Generic.Malware.V2.ED954EB1
Jiangmin	Trojan/FormatAll.n
Webroot	W32.Trojan.Trojan.Gen.X
Avira	TR/Brambureala
Antiy-AVL	Trojan/Generic.ASMalwS.15BE
Kingsoft	Win32.Troj.FormatAll.o.(kcloud)
Arcabit	Generic.Malware.V2.ED954EB1
ViRobot	Trojan.Win32.A.FormatAll.24576
Microsoft	Trojan:Win32/FormatAll.H
Google	Detected
VBA32	BScope.Trojan.Occamy
ALYac	Generic.Malware.V2.ED954EB1
MAX	malware (ai score=100)
Rising	Trojan.Win32.KillTask.a (CLASSIC)
Yandex	Trojan.Formatall!JBV4Mr9A8tQ
MaxSecure	Trojan.Malware.694329.susgen
Fortinet	W32/FormatAll.O!tr
BitDefenderTheta	Gen:NN.ZevbaF.34682.bm0@a8GMcvcb
AVG	Win32:FormatAll-D [Trj]
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_70% (W)