Categories: Trojan

Trojan:Win32/Wacatac.A!rfn information

The Trojan:Win32/Wacatac.A!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Wacatac.A!rfn virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan:Win32/Wacatac.A!rfn?


File Info:

crc32: E2EEEF31md5: ad359f8ad4776fe8850f99f6282e3ca5name: 1581237541457.exesha1: 6633113b6e0239b3096f671879884df1cc6c3b58sha256: 2f0f31d6ae2bf56390442db6e3b941d23f16e7fd14e8c6e96f50a85895a9a830sha512: 1f9c1e93f26faa4d8bf0be6886c8e412421ba9d5d38c6bae9a9b39c8903c6a34e72e20d8f5f3a3d62bd18d35bcfc38ab3c8b7d3137ce66c22bbd4121afac1fb3ssdeep: 6144:Zbm+A8sF0jzCRRXgF9WaOgSANtMm28YfdI5vQeFr9szc3w5IGUTRlmDfuvqXmX8:Zy4s6j6lgF9WTgdvMX8cdobx3RHR8DWtype: MS-DOS executable, MZ for MS-DOS

Version Info:

LegalCopyright: x5982x6709x4fb5x6743x8bf7x8054x7cfbx4f5cx8005FileVersion: 1.5.0.0CompanyName: x661fx671fx516dComments: x56fdx5bb6x5404x7c7bx89c4x8303x4e0bx8f7dProductName: x56fdx5bb6x5404x7c7bx89c4x8303x4e0bx8f7dProductVersion: 1.5.0.0FileDescription: x53efx4ee5x56fdx5bb6x5404x7c7bx89c4x8303x4e0bx8f7dTranslation: 0x0804 0x04b0

Trojan:Win32/Wacatac.A!rfn also known as:

MicroWorld-eScan Trojan.Generic.22023685
FireEye Generic.mg.ad359f8ad4776fe8
ALYac Trojan.Generic.22023685
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
Sangfor Malware
BitDefender Trojan.Generic.22023685
CrowdStrike win/malicious_confidence_80% (W)
TrendMicro TROJ_GEN.R035C0PLO19
Symantec ML.Attribute.HighConfidence
APEX Malicious
Avast Win32:Malware-gen
GData Trojan.Generic.22023685
Alibaba Trojan:Application/WsGame.fbba94b4
NANO-Antivirus Trojan.Win32.Wsgame.erbvoy
AegisLab Trojan.Win32.Agent.li0G
Tencent Win32.Trojan.Psw.Lnnx
Ad-Aware Trojan.Generic.22023685
Sophos Generic PUA GG (PUA)
Comodo TrojWare.Win32.Agent.OSCF@5rs7jr
F-Secure Trojan.TR/PSW.WsGame.eltil
DrWeb Trojan.PWS.Wsgame.51637
Invincea heuristic
McAfee-GW-Edition BehavesLike.Win32.Malware.fc
Trapmine malicious.high.ml.score
CMC Virus.Win32.Sality!O
Emsisoft Trojan.Generic.22023685 (B)
Webroot W32.Trojan.Gen
Avira TR/PSW.WsGame.eltil
Endgame malicious (high confidence)
Arcabit Trojan.Generic.D1500E05
Microsoft Trojan:Win32/Wacatac.A!rfn
AhnLab-V3 Trojan/Win32.Generic.C2614346
Acronis suspicious
McAfee RDN/Generic.rp
MAX malware (ai score=96)
ESET-NOD32 a variant of Win32/Packed.FlyStudio.AA potentially unwanted
TrendMicro-HouseCall TROJ_GEN.R035C0PLO19
SentinelOne DFI – Suspicious PE
MaxSecure Trojan.Malware.7164915.susgen
Fortinet PossibleThreat
BitDefenderTheta Gen:NN.ZexaF.34090.xmuaa02WRyob
AVG Win32:Malware-gen
Cybereason malicious.ad4776
Paloalto generic.ml

How to remove Trojan:Win32/Wacatac.A!rfn?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Ransom.Loki.9508 removal guide

The Ransom.Loki.9508 is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

Malware.AI.2988467486 (file analysis)

The Malware.AI.2988467486 is considered dangerous by lots of security experts. When this infection is active,…

16 mins ago

What is “Malware.AI.3626822667”?

The Malware.AI.3626822667 is considered dangerous by lots of security experts. When this infection is active,…

26 mins ago

Trojan:Win32/Zusy.GXZ!MTB information

The Trojan:Win32/Zusy.GXZ!MTB is considered dangerous by lots of security experts. When this infection is active,…

31 mins ago

Malware.AI.1681308215 removal tips

The Malware.AI.1681308215 is considered dangerous by lots of security experts. When this infection is active,…

31 mins ago

Application.Babar.402455 removal tips

The Application.Babar.402455 is considered dangerous by lots of security experts. When this infection is active,…

32 mins ago