Categories: Trojan

Should I remove “Trojan:Win32/UpperCider.A!dha”?

The Trojan:Win32/UpperCider.A!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/UpperCider.A!dha virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
A process attempted to delay the analysis task.
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

trems.rvenee.com

contacts.rvenee.com

How to determine Trojan:Win32/UpperCider.A!dha?


File Info:
crc32: 9B265610md5: b275ca64935ae5cfe7bea5fa7f53bdd2name: B275CA64935AE5CFE7BEA5FA7F53BDD2.mlwsha1: 86f6498c035080e7b70bcaa62b22d7593787f0b1sha256: 2371f5b63b1e44ca52ce8140840f3a8b01b7e3002f0a7f0d61aecf539566e6a1sha512: 57463cd6114e8b3f80f7081fc202608187b207d8daf8f9679f4ee57dac14a0c84ded58616d3ecfa12e31a1127c7bee45f122f9e3366a749e95c2175035c2b715ssdeep: 3072:byxtF/nWCQnh0fhYUCnNrqaQ8M2siVdJ88hpHNA0t+4wC4Z:byxv1Qh0fBCnN2aQ8PsgH52C4type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan:Win32/UpperCider.A!dha also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ransom.GandCrab.16
ALYac	Gen:Variant.Ransom.GandCrab.16
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 003c36381 )
BitDefender	Gen:Variant.Ransom.GandCrab.16
K7GW	Trojan ( 003c36381 )
Cybereason	malicious.4935ae
Symantec	Backdoor.Leenania
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Agent-6370274-0
Kaspersky	Trojan.Win32.ChessMaster.a
Alibaba	Trojan:Win32/ChessMaster.528399a7
NANO-Antivirus	Trojan.Win32.APosT.fbjyrg
ViRobot	Trojan.Win32.S.Agent.157696.EE
Tencent	Win32.Trojan.Chessmaster.Pdvp
Ad-Aware	Gen:Variant.Ransom.GandCrab.16
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Dropper.Gen
Zillya	Trojan.ChessMaster.Win32.1
TrendMicro	BKDR_ANEL.ZJFA-A
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
FireEye	Generic.mg.b275ca64935ae5cf
Emsisoft	Gen:Variant.Ransom.GandCrab.16 (B)
Ikarus	Trojan.Win32.Agent
Jiangmin	Trojan.APosT.ep
Webroot	W32.Trojan.Gen
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.TGeneric
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/UpperCider.A!dha
Arcabit	Trojan.Ransom.GandCrab.16
ZoneAlarm	Trojan.Win32.ChessMaster.a
GData	Gen:Variant.Ransom.GandCrab.16
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.C2255004
Acronis	suspicious
McAfee	Artemis!B275CA64935A
MAX	malware (ai score=100)
VBA32	Trojan.APosT
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
ESET-NOD32	Win32/Agent.SWK
TrendMicro-HouseCall	BKDR_ANEL.ZJFA-A
Rising	Dropper.Generic!8.35E (CLOUD)
Yandex	Trojan.GenAsa!9edsNQ6/MqY
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Ursnif.BW!tr
BitDefenderTheta	AI:Packer.88E093BB1F
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Dropper.b73