Categories: Trojan

Trojan:Win32/Vundo!G malicious file

The Trojan:Win32/Vundo!G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Vundo!G virus can do?

Behavioural detection: Executable code extraction – unpacking
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/Vundo!G?


File Info:
name: 74D670A92309CD450615.mlwpath: /opt/CAPEv2/storage/binaries/655c1dc0a45f533878a96bd57b95fd6093334154afe3fcbdf8688454c694dd53crc32: DDDE7A4Cmd5: 74d670a92309cd4506155c8400d55544sha1: b26379e1a0bd2687e28cebb7e76a96f55263c50bsha256: 655c1dc0a45f533878a96bd57b95fd6093334154afe3fcbdf8688454c694dd53sha512: 70abe01cae223c6c908382ec1f8a48be66f4714454700e47530d63cadd2170c00ebb129e3821a532ed79329b8f76e4f7949a2d6bbede9fbfd9021a302eed141assdeep: 1536:jNG0mH0iaGc3RorXbNZSfLq6DYK4Z0ajQX9PcHjUTTv692btA8xaYow3ym2Rem:jPmH0jxUNZSfLq654ZMX9PcHYP6YWea7type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T124831298B73623E1C2B5D731D12626B31979C6A35F20E2F76823D0E2CC429B989F7345sha3_384: e66265d2bd226ccf2ae0c89b26ec7da53291a776a99cca2cf7610d33b6e5d65d138a7d7b9ed4de6f99eb83157d20b9acep_bytes: 506870530210e809040000e8e4040000timestamp: 2008-05-08 21:50:46
Version Info:
0: [No Data]

Trojan:Win32/Vundo!G also known as:

Bkav	W32.AIDetectMalware
Lionic	Hacktool.Win32.Krap.ldVw
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.Vundo.GPR
FireEye	Generic.mg.74d670a92309cd45
Skyhigh	BehavesLike.Win32.Vundo.mc
McAfee	Vundo.gen.hz
Cylance	unsafe
Zillya	Trojan.Agent.Win32.25606
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	VirTool:Win32/Obfuscator.9d44d039
K7GW	Trojan ( 00521e9b1 )
K7AntiVirus	Trojan ( 00521e9b1 )
VirIT	Trojan.Win32.Vundo.GC
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.Virtumonde.NEO
APEX	Malicious
TrendMicro-HouseCall	Mal_Vundo-19
Kaspersky	Packed.Win32.Krap.q
BitDefender	Trojan.Vundo.GPR
NANO-Antivirus	Trojan.Win32.Krap.bhcbtc
Avast	Win32:Vuku [Trj]
Tencent	Packed.Win32.Krap.a
Emsisoft	Trojan.Vundo.GPR (B)
F-Secure	Trojan:W32/Vundo.gen!D
DrWeb	Trojan.Virtumod.based.27
VIPRE	Trojan.Vundo.GPR
TrendMicro	Mal_Vundo-19
Trapmine	malicious.high.ml.score
Sophos	Troj/Virtum-Gen
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.Agent.ici
Webroot	W32.Rogue.Gen
Google	Detected
Avira	TR/ATRAPS.Gen2
Varist	W32/Virtumonde.AH_b.gen!Eldorado
Antiy-AVL	Trojan[Packed]/Win32.Krap
Kingsoft	Win32.Troj.VitrumondeT.ko.84992
Microsoft	Trojan:Win32/Vundo.gen!G
Xcitium	TrojWare.Win32.PkdKrap.Q@1j8qvd
Arcabit	Trojan.Vundo.GPR
ViRobot	Trojan.Win32.Agent.84992.IM
ZoneAlarm	Packed.Win32.Krap.q
GData	Trojan.Vundo.GPR
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Xema.C74999
BitDefenderTheta	AI:Packer.4B68629A14
ALYac	Trojan.Vundo.GPR
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Virtumod
Panda	Trj/Krap.A
Rising	Trojan.Win32.VUNDO.cnw (CLASSIC)
Yandex	Trojan.GenAsa!h5WTtW0w/uU
Ikarus	Trojan.Win32.Monder
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Monder.CMWT!tr
AVG	Win32:Vuku [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Virtool:Win/Virtumonde.NEO