About “Trojan:Win32/Wacatac.D!ml” infection

Malware Removal

The Trojan:Win32/Wacatac.D!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What Trojan:Win32/Wacatac.D!ml virus can do?

  • Executable code extraction
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Sindhi
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system

Related domains:

z.whorecord.xyz
a.tomx.xyz
nsabeau.com.my

How to determine Trojan:Win32/Wacatac.D!ml?


File Info:

crc32: 1B5BAF61
md5: a2bad9119da374d3df08f296d8960949
name: upd.exe
sha1: b5c5230cbdb9e1f8c4c9bb34f1e66e15c6f79f71
sha256: 1ef8a374b6b9f4eeb7e080dbb0da7d000613a60fce39ae25d3a3ccedb7277245
sha512: 12f927a3921eae5660b5fba391a73bfec7ecd86707263026f845fd564bf84923df99e1d35d960e232c8802e068b5409bd4f9dd315f0c714285a9842614c85eb1
ssdeep: 6144:SjfJy7rYxOWZ8q++MtWHWL0Xofmq+e1BZl+:MhyvYxOW2q++kWHNyJc
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Wacatac.D!ml also known as:

FireEyeGeneric.mg.a2bad9119da374d3
CylanceUnsafe
SangforMalware
Cybereasonmalicious.cbdb9e
BitDefenderThetaGen:NN.ZexaF.34082.puW@ay0Ro5lG
SymantecPacked.Generic.528
RisingMalware.Heuristic!ET#87% (RDMK:cmRtazqatoQgBLfPopW/MDqfXsVF)
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.AdwareBProtect.dh
Trapminemalicious.high.ml.score
Endgamemalicious (high confidence)
MicrosoftTrojan:Win32/Wacatac.D!ml
Acronissuspicious
VBA32BScope.Trojan.Gandcrab
APEXMalicious
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_100%
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM10.1.9125.Malware.Gen

How to remove Trojan:Win32/Wacatac.D!ml?

Trojan:Win32/Wacatac.D!ml removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment