Categories: Trojan

Trojan:Win32/Startpage.AEN malicious file

The Trojan:Win32/Startpage.AEN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Startpage.AEN virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Deletes executed files from disk
Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Startpage.AEN?


File Info:
name: 0143C10C54D01F8DF6D1.mlwpath: /opt/CAPEv2/storage/binaries/f07c3a7c878aeb8249ca6c73891263f194bc25a5c4b446d4e84687503bfe7784crc32: CE243E11md5: 0143c10c54d01f8df6d1dd78cbe1e1d8sha1: 151c81d44798393d5dcc0b54c443779a18e0ab06sha256: f07c3a7c878aeb8249ca6c73891263f194bc25a5c4b446d4e84687503bfe7784sha512: 1f7fd11eb87094f9c8ca6db531b4098ba2de6526e8c46a94c35883013e7d8003a5b3a87930c3cae0496db33399762f94a33ec4e1a3085cb6508bc0d1698445e0ssdeep: 24576:ByuFhCwUuqDluBMfEhJX3z5mKhwbLeoMh75:xhxqDosEL3F/w+hNtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F63533A328D1EA57D26752B61231ABE2FBF453CD4071BA05472D8AF8BD1F05BC306E52sha3_384: b52c5142b189b5da27ccd520e90b1aade2e6af5d876c791c30f222ea67949de49f1bf24d84d49f7325d5a9c877926715ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-06-18 21:33:32
Version Info:
0: [No Data]

Trojan:Win32/Startpage.AEN also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.b!c
DrWeb	Trojan.MulDrop2.58143
MicroWorld-eScan	Trojan.Generic.8389503
FireEye	Trojan.Generic.8389503
CAT-QuickHeal	Trojan.NSIS.Startpage.N
Skyhigh	BehavesLike.Win32.Dropper.tc
McAfee	Artemis!0143C10C54D0
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Trojan.Generic.8389503
Sangfor	Exploit.Win32.KsWebShieldOldVer.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	TrojanClicker:Win32/Startpage.d6bb23a5
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.447983
Arcabit	Trojan.Generic.D80037F
VirIT	Trojan.Win32.Agent.EMLQ
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
ESET-NOD32	multiple detections
APEX	Malicious
ClamAV	Win.Trojan.KillAV-91
Kaspersky	Trojan-Dropper.Win32.Agent.emlq
BitDefender	Trojan.Generic.8389503
NANO-Antivirus	Trojan.Nsis.Nsis.rdwqd
Avast	NSIS:KillAV-B [Trj]
Tencent	Win32.Trojan-Dropper.Agent.Icnw
Emsisoft	Trojan.Generic.8389503 (B)
Google	Detected
F-Secure	Trojan.TR/ATRAPS.Gen5
Baidu	NSIS.Trojan.Agent.a
Zillya	Dropper.Agent.Win32.71199
Trapmine	malicious.high.ml.score
Sophos	Troj/StartP-EO
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanDropper.Agent.bjft
Webroot	W32.Trojan.Gen
Varist	W32/StartPage.AN.gen!Eldorado
Avira	TR/ATRAPS.Gen5
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.StartPage.aen
Kingsoft	malware.kb.a.983
Xcitium	Application.Win32.MeinV.AK@57p4lw
Microsoft	Trojan:Win32/Startpage.AEN
ZoneAlarm	Trojan-Dropper.Win32.Agent.emlq
GData	NSIS.Adware.StartPage.G
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win32.Agent.C196346
ALYac	Trojan.Generic.8389503
VBA32	TrojanDropper.Agent
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	HV_ZYX_BH012947.TOMC
Rising	Trojan.Script.StartPage.dh (CLASSIC)
Ikarus	Trojan.NSIS
MaxSecure	Trojan-Dropper.Win32.Agent.emlq
Fortinet	W32/Agent.EMLQ!tr
AVG	NSIS:KillAV-B [Trj]
DeepInstinct	MALICIOUS