Should I remove “Trojan:Win32/Wacatac.A!ml”?

The Trojan:Win32/Wacatac.A!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan:Win32/Wacatac.A!ml virus can do?

• Executable code extraction
• Creates RWX memory
• The binary likely contains encrypted or compressed data.
• Anomalous binary characteristics

How to determine Trojan:Win32/Wacatac.A!ml?

File Info:
crc32: D4F41A57md5: 0a13000c2ecf9a8b39f5498cce45a53dname: remcryp.exesha1: 90e1f7033afc5dc68eea8274b947052e8200c41bsha256: 23a02ddd91e983f70ea0319ccc6372464ec82e6fd6067cefe1dfd442c69ee60dsha512: 2ef0c2b1dd1e9d9479bf544857cfe6f79fac61cd5909476df0aacb21dc4153a4e1cf90e746048d680dc5175997b7ce6371f59f8a58e7242576c767eb8f6dd342ssdeep: 12288:WjLg0hkEtrzcDTTn8oIiQT3WWkou5+TtnSHG:wU0hjcj8oFQqWk2tntype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0InternalName: ControRAXFileVersion: 1.00Comments: AUTOProductName: MatreFISTRoccaF4ProductVersion: 1.00OriginalFilename: ControRAX.exe

Trojan:Win32/Wacatac.A!ml also known as:

MicroWorld-eScan	Gen:Variant.Razy.584376
McAfee	GenericRXJD-RS!0A13000C2ECF
Cylance	Unsafe
Alibaba	Trojan:Win32/Injector.5e86732c
K7GW	Trojan ( 0055c16b1 )
Arcabit	Trojan.Razy.D8EAB8
Invincea	heuristic
F-Prot	W32/Injector.VF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EJCS
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Crypt.ajqi
BitDefender	Gen:Variant.Razy.584376
Rising	Spyware.Noon!8.E7C9 (TFE:5:mBUkJ1n2ABT)
Ad-Aware	Gen:Variant.Razy.584376
McAfee-GW-Edition	BehavesLike.Win32.Fareit.hc
Fortinet	W32/Injector.EJBG!tr
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.0a13000c2ecf9a8b
Sophos	Mal/FareitVB-X
Ikarus	Trojan-Spy.Keylogger.AgentTesla
Cyren	W32/Injector.VF.gen!Eldorado
MAX	malware (ai score=86)
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Wacatac.A!ml
ZoneAlarm	Trojan.Win32.Crypt.ajqi
Acronis	suspicious
ALYac	Gen:Variant.Razy.584376
Malwarebytes	Trojan.MalPack.VB
TrendMicro-HouseCall	TROJ_GEN.R002C0RKP19
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
GData	Gen:Variant.Razy.584376
BitDefenderTheta	Gen:NN.ZevbaCO3.32515.Km0@a8J01fli
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.107

How to remove Trojan:Win32/Wacatac.A!ml?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.