Trojan:Win32/UnionCryptoTrader malicious file

The Trojan:Win32/UnionCryptoTrader is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/UnionCryptoTrader virus can do?

How to determine Trojan:Win32/UnionCryptoTrader?


File Info:
crc32: 3A466D27
md5: 629b9de3e4b84b4a0aa605a3e9471b31
name: 629B9DE3E4B84B4A0AA605A3E9471B31.mlw
sha1: 1ef0e1cabd344726b663cec8d9e68f147259da55
sha256: 01c13f825ec6366ac2b6dd80e5589568fa5c8685cb4d924d1408e3d7c178902f
sha512: c70abbe52cbbed220fee218664d1c5f4313bd5387de11c275aa31115e90328dac032c6138954f3931c7d134e8613ad6c278ed29d78c0dc8199a1433b1a106132
ssdeep: 3072:Q/MdytyORF471FiHNkwBFTdpSI94e1ZVypzCG9n7r:Q/ftvF471AHNFjdYIZOt
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 UnionCrypto Corporation. All rights reserved.
InternalName: unioncryptoupdater.exe
FileVersion: 1.0.23.474
CompanyName: UnionCrypto Co.Ltd
ProductName: Union Crypto Trading Updater
ProductVersion: 1.0.23.474
FileDescription: Union Crypto Trading Updater
OriginalFilename: unioncryptoupdater.exe
Translation: 0x0409 0x04b0

Trojan:Win32/UnionCryptoTrader also known as:

Elastic	malicious (high confidence)
CAT-QuickHeal	Trojan.Win64
Qihoo-360	Win64/Trojan.Agentb.H8oAMO0A
McAfee	Trojan-Agent.c
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win64.Agentb.4!c
Sangfor	Trojan.Win32.UnionCryptoTrader.mt
K7AntiVirus	Trojan ( 0056425b1 )
BitDefender	Trojan.GenericKD.33626108
K7GW	Trojan ( 0056425b1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Generic.D20117FC
Cyren	W64/Trojan.LOCB-0071
Symantec	Trojan Horse
ESET-NOD32	a variant of Win64/Agent.UV
Paloalto	generic.ml
Cynet	Malicious (score: 85)
Kaspersky	Trojan.Win64.Agentb.dw
Alibaba	Trojan:Win64/Agentb.65878db4
NANO-Antivirus	Trojan.Win64.Mlw.icfhya
MicroWorld-eScan	Trojan.GenericKD.33626108
Rising	Trojan.Agent!8.B1E (CLOUD)
Ad-Aware	Trojan.GenericKD.33626108
Emsisoft	Trojan.GenericKD.33626108 (B)
Comodo	Malware@#1pk1nq7xrtj1d
F-Secure	Trojan.TR/Agent.pfpad
Zillya	Trojan.Agent.Win64.5106
TrendMicro	TROJ_FRS.0NA103IE20
McAfee-GW-Edition	Trojan-Agent.c
FireEye	Trojan.GenericKD.33626108
Sophos	Mal/Generic-R + Troj/APosT-T
Ikarus	Trojan.Win64.Agent
Jiangmin	Trojan.Agentb.gng
Avira	TR/Agent.pfpad
Antiy-AVL	Trojan/Win64.Agent
Kingsoft	Win32.Troj.Win64.dw.(kcloud)
Microsoft	Trojan:Win32/UnionCryptoTrader
ViRobot	Trojan.Win64.S.Agent.161280
ZoneAlarm	Trojan.Win64.Agentb.dw
GData	Trojan.GenericKD.33626108
TACHYON	Trojan/W64.Agent.161280.C
AhnLab-V3	Trojan/Win64.Agent.C4340847
VBA32	Trojan.Win64.Agentb
ALYac	Trojan.Nukesped.A
MAX	malware (ai score=100)
Cylance	Unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_FRS.0NA103IE20
Tencent	Win64.Trojan.Agentb.Wnwl
Yandex	Trojan.Agent!NLW6A93rJho
Fortinet	W64/Agent.UV!tr
AVG	Win64:Trojan-gen
Avast	Win64:Trojan-gen
MaxSecure	Trojan.Malware.104553275.susgen

How to remove Trojan:Win32/UnionCryptoTrader?

Trojan:Win32/UnionCryptoTrader removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X