Categories: Trojan

What is “Trojan:Win32/Orbus”?

The Trojan:Win32/Orbus is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Orbus virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
The executable is compressed using UPX

How to determine Trojan:Win32/Orbus?


File Info:
crc32: 84A0C06Amd5: 92b878812d744751fdb7e6bb4e2d4697name: 92B878812D744751FDB7E6BB4E2D4697.mlwsha1: f7fe7364f8ff46b4b29ab746e85ac13009c541c4sha256: dbe8589e52436cc17fa64c13621299b3606924a3398e4eed023e207cde639491sha512: 11f788e77ab68e55c5e1572eeb7cd7a57bbca10e8d305acd3f24785de933ea72614b9b5a3c7babb0a84bad36e8232303a532f56ab68b1d62a73f2e1706581984ssdeep: 6144:MlDL0XExbULYJGgPraAy2IPynx8Vmj30biy:MlLKE5UsJGgmuIsEmj30bitype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Trojan:Win32/Orbus also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.140070
FireEye	Generic.mg.92b878812d744751
CAT-QuickHeal	Trojan.Reconyc
McAfee	GenericRXMU-AJ!92B878812D74
Cylance	Unsafe
VIPRE	Trojan.Win32.Orbus (fs)
AegisLab	Trojan.Win32.Reconyc.4!c
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 0055e3da1 )
BitDefender	Gen:Variant.Graftor.140070
K7GW	Trojan-Downloader ( 0055e3da1 )
Cybereason	malicious.12d744
Baidu	Win32.Trojan.Pfoenic.b
Cyren	W32/Ladivyrop.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Agent-5739299-0
Kaspersky	Trojan.Win32.Reconyc.bvep
Alibaba	TrojanDownloader:Win32/Reconyc.c38834dd
NANO-Antivirus	Trojan.Win32.LP.cxzkgy
ViRobot	Trojan.Win32.Z.Reconyc.246272.AE
Rising	Trojan.Ladivyrop!1.A208 (CLASSIC)
Ad-Aware	Gen:Variant.Graftor.140070
Emsisoft	Gen:Variant.Graftor.140070 (B)
Comodo	TrojWare.Win32.Orbus.A@5c68y4
F-Secure	Trojan.TR/Agent.114688.800
DrWeb	Trojan.KillFiles.58976
Zillya	Trojan.Reconyc.Win32.886
TrendMicro	HT_ORBUS_GA31061D.UVPM
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Sophos	AdLoad (PUA)
Ikarus	Trojan-Downloader.Win32.Adload
Jiangmin	Trojan/Reconyc.tt
Avira	TR/Dldr.Adload.dmoui
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.Badur
Microsoft	Trojan:Win32/Orbus
Arcabit	Trojan.Graftor.D22326
ZoneAlarm	Trojan.Win32.Reconyc.bvep
GData	Gen:Variant.Graftor.140070
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Reconyc.C1909093
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34804.puW@a4664Opb
ALYac	Gen:Variant.Graftor.140070
TACHYON	Trojan/W32.Reconyc.246272.D
VBA32	BScope.TrojanDownloader.Pfoenic
Malwarebytes	Malware.AI.4126702745
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/TrojanDownloader.Adload.NMX
TrendMicro-HouseCall	HT_ORBUS_GA31061D.UVPM
Tencent	Trojan.Win32.Reconyc.a
Yandex	Trojan.GenAsa!a5cMV6TG3wQ
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Adload.NMX!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.b47