UDS:Trojan.Win32.Garvi (file analysis)

The UDS:Trojan.Win32.Garvi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:Trojan.Win32.Garvi virus can do?

• Presents an Authenticode digital signature
• Creates RWX memory
• Reads data out of its own binary image
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine UDS:Trojan.Win32.Garvi?

File Info:
crc32: F8A78F93
md5: 52911f85ff9bf20a7f81ae4a80f8820d
name: 52911F85FF9BF20A7F81AE4A80F8820D.mlw
sha1: a9e0594fbc43d7e9e7e275f3136b3e15e398edc0
sha256: d2db5ffa3b259a3ed4d270ad96a15c008883ecff395eb1aa5816264c8a27a8db
sha512: a44c08f8a717cd6a60a1cb91d1444f68250262e4017c2f7cf16b91b8f69c0c37b245e37b304366ab38026f936c8c559c83aa3474afa55f50c8d63d850d628656
ssdeep: 12288:BM29YJoNeElWR9BBqIWdgracmdwTHglasg8:BM2loEucIggravOgcsg8
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: Wuhan Dongyi Technology Co., Ltd
FileVersion: 1.2.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: x8d62x9a74x51c6x661f
ProductVersion: 1.2.0.0
FileDescription: 
Translation: 0x0804 0x03a8

UDS:Trojan.Win32.Garvi also known as:

How to remove UDS:Trojan.Win32.Garvi?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.