Trojan

About “Trojan:Win32/Witproc!rts” infection

Malware Removal

The Trojan:Win32/Witproc!rts is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Witproc!rts virus can do?

  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan:Win32/Witproc!rts?


File Info:

crc32: 4EF786FE
md5: 069994f33b8b962f021cfa8f7cfaba2a
name: 069994F33B8B962F021CFA8F7CFABA2A.mlw
sha1: bb643b3e0dff20d99b4bc9a3ae24ec3b164e3e2c
sha256: dd2e13ff2fc60b608514ce34710611e436ea381f124a68c4c6ed4ca8ea5196d8
sha512: 552258316c6b49544680d4d3c4969812ee5c77acc90f6d6a9da176d8fd100a0e8230530c73818cd701cc1f34c668b6cad546e2dafbe0064cb8a9d387980178d7
ssdeep: 3072:rOufR93boZ8Dsl0wyQt5DpgWCoOhHv3WKg//1EJZXND:ieTboZ8YdqZ9hHv3Bg/WJZXND
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Witproc!rts also known as:

MicroWorld-eScanTrojan.Crypt.EL
FireEyeGeneric.mg.069994f33b8b962f
CAT-QuickHealTrojan.Generic
McAfeePWS-FCEQ!069994F33B8B
VIPRETrojan.Win32.Generic.pak!cobra
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.Crypt.EL
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.33b8b9
CyrenW32/Downloader.HGGJ-8088
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:GenMaliciousA-EJT [Trj]
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Timoha.cwlhks
ViRobotTrojan.Win32.Downloader.334600
AegisLabTrojan.Win32.Timoha.a!c
RisingBackdoor.PoisonIvy!8.1B5C (TFE:5:McOrXzZ94iJ)
Ad-AwareTrojan.Crypt.EL
SophosMal/Generic-S
ComodoMalware@#3h3rotvpu94vq
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.MulDrop.20899
ZillyaDownloader.Agent.Win32.1551
McAfee-GW-EditionArtemis!Trojan
EmsisoftTrojan.Crypt.EL (B)
SentinelOneStatic AI – Suspicious PE
GDataTrojan.Crypt.EL
JiangminTrojan/Agent.cdzz
WebrootW32.Malware.Gen
AviraTR/Dropper.Gen
MAXmalware (ai score=86)
Antiy-AVLTrojan[Downloader]/Win32.Timoha
ArcabitTrojan.Crypt.EL
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Witproc!rts
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Xema.C74191
VBA32TrojanDownloader.Timoha
ALYacTrojan.Crypt.EL
MalwarebytesMalware.AI.1200371238
PandaTrj/Genetic.gen
ESET-NOD32Win32/TrojanDropper.Agent.QTM
TencentMalware.Win32.Gencirc.11494b68
YandexTrojan.GenAsa!iOKsETfVIz8
FortinetW32/Dloader.X!tr
BitDefenderThetaGen:NN.ZexaF.34804.uqZ@a8Ai7@si
AVGWin32:GenMaliciousA-EJT [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_70% (D)
Qihoo-360Win32/Trojan.Downloader.472

How to remove Trojan:Win32/Witproc!rts?

Trojan:Win32/Witproc!rts removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment