Trojan:Win32/Skeeyah (file analysis)

The Trojan:Win32/Skeeyah is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Skeeyah virus can do?

Creates RWX memory
Anomalous binary characteristics

How to determine Trojan:Win32/Skeeyah?


File Info:
crc32: 26C36B90
md5: 1cfbbd21729b58d9020e983283faff93
name: 1CFBBD21729B58D9020E983283FAFF93.mlw
sha1: b069a2644271a88ec4d6e5859014e688fb2d2d18
sha256: 37e5f95ef7e85cc86da52b650c06992b45b756a9c701360fba07ce8d45ce9978
sha512: d23337001c7dc6687451069590530e9c5ba69b01947539d78caae4d2bee054158bb37381e0c3ba3d442b337e1f8bffa760b27ec239ad47c25716045643d45896
ssdeep: 1536:QHa2Yh3Zrgvza6LFjRWl3naoq38xYYjAwqi8upYUc2ABfC5pLsosTeDH2W1ix:QHrIRgW6L9RsaohCYjoInrsTeD2WIx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: JFX
FileVersion: 20.0.10.0
FileDescription: Download Windows ADK Tools
ProductVersion: 20.0.10.0
CompanyName: JFX
Translation: 0x0409 0x04b0

Trojan:Win32/Skeeyah also known as:

CAT-QuickHeal	Trojan.Wacatac
McAfee	RDN/Generic.dx
Cylance	Unsafe
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Trojan.Win32.Crypt.XPACK
BitDefender	Trojan.GenericKD.35721291
Cybereason	malicious.1729b5
Arcabit	Trojan.Generic.D221104B
Cyren	W32/Trojan.WLZM-5557
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
Alibaba	Trojan:Win32/Generic.1579264a
MicroWorld-eScan	Trojan.GenericKD.35721291
Rising	Trojan.Skeeyah!8.3A6 (CLOUD)
Ad-Aware	Trojan.GenericKD.35721291
Comodo	Malware@#y7pi7q2auk76
TrendMicro	TROJ_GEN.R002C0PLI20
McAfee-GW-Edition	RDN/Generic.dx
FireEye	Generic.mg.1cfbbd21729b58d9
Emsisoft	Trojan.GenericKD.35721291 (B)
MaxSecure	Trojan.Malware.7175203.susgen
MAX	malware (ai score=96)
Microsoft	Trojan:Win32/Skeeyah
GData	Trojan.GenericKD.35721291
ALYac	Trojan.GenericKD.35721291
Malwarebytes	Malware.Heuristic.1001
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PLI20
Ikarus	Trojan.Crypt
Fortinet	W32/PossibleThreat
Webroot	W32.Trojan.GenKD
Qihoo-360	Generic/HEUR/QVM05.1.C57F.Malware.Gen

How to remove Trojan:Win32/Skeeyah?

Trojan:Win32/Skeeyah removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X