Trojan

Should I remove “UDS:Trojan.Win32.Llac.cxcc”?

Malware Removal

The UDS:Trojan.Win32.Llac.cxcc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What UDS:Trojan.Win32.Llac.cxcc virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine UDS:Trojan.Win32.Llac.cxcc?


File Info:

name: 002755F3BE8DD7D81475.mlw
path: /opt/CAPEv2/storage/binaries/39bd046147f77f57d27c159a1553dee0ee303d9363d0346d17907817ba355da8
crc32: DDF4339D
md5: 002755f3be8dd7d81475e11224b178f9
sha1: 698b6b280c1fc2d1c547b308d7c22e04f1e13b11
sha256: 39bd046147f77f57d27c159a1553dee0ee303d9363d0346d17907817ba355da8
sha512: 0445b0fcb0c54b60e3963d0125eae3135c730a5b5470b3d0d7d032392c2ba205d40974a2cef0e820d7c8cb269e23afd944bfe4dd778ec1d9ddd2fc4a5b951c4d
ssdeep: 12288:ehkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aC7g7plH7BryUdshJb:uRmJkcoQricOIQxiZY1iaCWbHdcb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T149F4B021F5D69036C2B323B19E7EF76A9A3D79360336D19723C82D315EA05416B2A733
sha3_384: bfdb0716c16820f9c48aef21f2b2e23ebaadd0eae6118ff1496154d2689af76e25ba604a4e2cb25be3f1e8063b8b3bff
ep_bytes: e816900000e989feffffcccccccccc55
timestamp: 2012-01-29 21:32:28

Version Info:

FileDescription:
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

UDS:Trojan.Win32.Llac.cxcc also known as:

BkavW32.AIDetect.malware2
DrWebTrojan.Click2.52579
FireEyeGeneric.mg.002755f3be8dd7d8
MalwarebytesGeneric.Malware/Suspicious
K7AntiVirusTrojan ( 700000111 )
AlibabaTrojan:Win32/Clicker.a3edf766
K7GWTrojan ( 700000111 )
Cybereasonmalicious.80c1fc
CyrenW32/AutoIt.AO.gen!Eldorado
SymantecSecurityRisk.gen1
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Autoit-7051615-1
KasperskyUDS:Trojan.Win32.Llac.cxcc
NANO-AntivirusTrojan.Script.Autoit.debvij
AvastWin32:Malware-gen
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.BadFile.bh
SophosMal/Generic-S
IkarusTrojan.Clicker
JiangminTrojan.Llac.hbw
MicrosoftPWS:Win32/Zbot!ml
CynetMalicious (score: 100)
McAfeeArtemis!002755F3BE8D
VBA32Trojan.Autoit.Wirus
TrendMicro-HouseCallTROJ_GEN.R002H0CH421
AVGWin32:Malware-gen

How to remove UDS:Trojan.Win32.Llac.cxcc?

UDS:Trojan.Win32.Llac.cxcc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment