Categories: Trojan

Trojan:Win32/Woozlist.B removal tips

The Trojan:Win32/Woozlist.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Woozlist.B virus can do?

Performs HTTP requests potentially not found in PCAP.
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Trojan:Win32/Woozlist.B?


File Info:
name: 267E525D49FC99A4FE48.mlwpath: /opt/CAPEv2/storage/binaries/3fed6ec491ed7406fd50e1c9a3be4ae006ef8d77691ba057fbf16db21a940cbccrc32: 5500D69Emd5: 267e525d49fc99a4fe484717822ef233sha1: 790a572571f842ea99e376d6c23a86b1ba2501afsha256: 3fed6ec491ed7406fd50e1c9a3be4ae006ef8d77691ba057fbf16db21a940cbcsha512: c43f4b9f9d246ac1ae0606d239345361946efec2f7bd229d01883ee82c368f9363af0cd5770ccef018ecb26ba0ee055133f28b8a8157bf6e8d2d48593f2e18c0ssdeep: 12288:vq5uJX+8fZZHYWbymdVZddaohbM33UicEgGuJhlVQLAG3tu:voJ8RZ4WzdVZddaohQUicrGuJqkG3type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A426327ECF69CC70F5176630964EDD2CB072AF2468B081E412E63974C5B1386A5EDAE3sha3_384: 6270017efedeaff73819bd3680eed1d4c8290d4691817069a199171f6f7c1de30799fa76f8ea8ee7a1198565864b02f0ep_bytes: 558bec6aff6820f5850068b843470064timestamp: 2011-04-05 19:08:59
Version Info:
FileVersion: 1.0.0.0FileDescription: 红树林服务评价系统ProductName: 红树林服务评价系统ProductVersion: 1.0.0.0CompanyName: 西安网吧运营中心LegalCopyright: 西安网吧运营中心 版权所有Comments: 红树林服务评价系统Translation: 0x0804 0x04b0

Trojan:Win32/Woozlist.B also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.liRL
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.GenericKD.69822296
FireEye	Generic.mg.267e525d49fc99a4
Skyhigh	BehavesLike.Win32.Generic.rt
McAfee	Artemis!267E525D49FC
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Trojan ( 005246d51 )
K7AntiVirus	Trojan ( 005246d51 )
Arcabit	Trojan.Generic.D4296758
BitDefenderTheta	Gen:NN.ZexaF.36792.@t0@aihsm5iH
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Trojan.GenericKD.69822296
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Trojan.GenericKD.69822296 (B)
F-Secure	Trojan:W32/DelfInject.R
VIPRE	Trojan.GenericKD.69822296
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Varist	W32/Trojan.CLL.gen!Eldorado
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.990
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	Trojan:Win32/Woozlist.B
GData	Win32.Trojan.PSE.15IBL0F
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5541696
VBA32	BScope.Trojan.Reconyc
ALYac	Trojan.GenericKD.69822296
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H0CJM23
Rising	Trojan.Generic@AI.99 (RDML:NUjIzGKSpq8I6ZF+4tqAUw)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Application
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.571f84
DeepInstinct	MALICIOUS