UDS:Trojan.Win32.Selfmod removal tips

The UDS:Trojan.Win32.Selfmod is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:Trojan.Win32.Selfmod virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• At least one process apparently crashed during execution
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine UDS:Trojan.Win32.Selfmod?

File Info:
name: 89966A7F93DD724AE10F.mlw
path: /opt/CAPEv2/storage/binaries/70e875e3906ebb9b9093fcf1bfbea9d779b6e93eeebb770027972d41e5492553
crc32: 1AD3486C
md5: 89966a7f93dd724ae10f1ce7a1308947
sha1: 29bdecee37c8652d264fc8e4cebf9c729c0005e9
sha256: 70e875e3906ebb9b9093fcf1bfbea9d779b6e93eeebb770027972d41e5492553
sha512: 4c5dc08ca072104a5290db18c6d0a3a78bd34ea45048e06336e43047f8be3fdcc988d7be314c1955f01b76120abd98bcdd765d3152e57007fb984c3b87768adf
ssdeep: 49152:qKqnStm3L8/lr2Marga6qM+gS6ga6qM+g:hq0w/
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T175F57E193F715443C7C5F239B9EA9E204C116C2C7A36E22E74C7757E7922E8CE58A62C
sha3_384: 05364ad131ed07f255400b67aa094e98eb287d45795b83be64a6a4dbedc1e7d95ad736d3d748337b0026b0f9dfb7d6eb
ep_bytes: 80d8f697d0b17210d5507b81571a133b
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

UDS:Trojan.Win32.Selfmod also known as:

How to remove UDS:Trojan.Win32.Selfmod?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.