Trojan:Win32/Upatre!pz removal instruction

The Trojan:Win32/Upatre!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Upatre!pz virus can do?

• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Trojan:Win32/Upatre!pz?

File Info:
name: 02187501639EE9E493AC.mlw
path: /opt/CAPEv2/storage/binaries/7de33ebc5728e82e2a6b1d356c48e5ebecf18384252c200cc4d5c05270df6222
crc32: 9FDE5132
md5: 02187501639ee9e493acb99d5a414029
sha1: ae4a90d80ca1d8809fb162c5f4ba74bdcd6f728d
sha256: 7de33ebc5728e82e2a6b1d356c48e5ebecf18384252c200cc4d5c05270df6222
sha512: ee3acd7c2f4af4200f454d26aa8efb2ed030730ff578df57efb981afe187cbb04439188ddd8461ee5cfb678b1833dad534a68426b29355600dc217965386f325
ssdeep: 192:dBR0donwR2FFFLBfoZvrzqfR572WhyBQFAd1e/il2:dNnwR2FvVot+X7BAmCd1P2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T103E224386ED916B2E3B7DAB6C6F645C6FE75B4233911980E40DB03450C13F57ADA1A0E
sha3_384: e53a661269ac1a91a74e25bf1b2bf6be7cf249b19917f49ce129b9dca822058e6dd9b04a8877ad484e6f2c9fdd73ab25
ep_bytes: 558bec81ec3808000053565733f656ff
timestamp: 2013-10-30 10:58:20

Version Info:
0: [No Data]

Trojan:Win32/Upatre!pz also known as:

How to remove Trojan:Win32/Upatre!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.