Categories: Virus

UDS:Virus.DOS.Moctezuma.2416 malicious file

The UDS:Virus.DOS.Moctezuma.2416 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:Virus.DOS.Moctezuma.2416 virus can do?

Reads data out of its own binary image
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities for basic functionality

How to determine UDS:Virus.DOS.Moctezuma.2416?


File Info:
name: 7B63E629C159A40AF462.mlwpath: /opt/CAPEv2/storage/binaries/17112ec307fdcced541e4909d9ad80aa274528ee7b5dcea150a0053a0a1958bbcrc32: 908B82C8md5: 7b63e629c159a40af4628319e97a4bc9sha1: 1838f47837977fd62ba2054f20911f8dfadbeaabsha256: 17112ec307fdcced541e4909d9ad80aa274528ee7b5dcea150a0053a0a1958bbsha512: 11d45fee5a86149e1f90b776d3083b6392a34c28754c1b5a33a6675ec865dbe5e4e57dd102ebaea43a6781b22c0fd987d5d05a6bdf9be3d24100e0fb21948fe1ssdeep: 1536:HbJksB1k/ledK5QPqfhVWbdsmA+RjPFLC+e5hs0ZGUGf2g:HVksB0edNPqfcxA+HFshsOgtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T120739F62B9D0C430F45481B19D3D2E73AE7EE9540A5793F79BD4B5A4CEF0190AA0B32Bsha3_384: dc427830906d2f02b6797ac1994fa41d52b7c1a0879ff051df5ceb10053e9ba5b66fa71da31418c2dd3e6fdb6038fc0fep_bytes: eb1066623a432b2b484f4f4b90e928f1timestamp: 2011-01-11 01:44:56
Version Info:
0: [No Data]

UDS:Virus.DOS.Moctezuma.2416 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.FileInfector.eGW@a0SquDf
FireEye	Generic.mg.7b63e629c159a40a
CAT-QuickHeal	Trojan.Antavmu.D7
ALYac	Gen:Trojan.FileInfector.eGW@a0SquDf
Malwarebytes	Malware.AI.1943549339
VIPRE	Gen:Trojan.FileInfector.eGW@a0SquDf
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 001f4e2b1 )
K7GW	Trojan ( 001f4e2b1 )
Cybereason	malicious.9c159a
BitDefenderTheta	AI:Packer.A86A0CF01E
VirIT	Trojan.Win32.Generic.ABFQ
Cyren	W32/Ildirim.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Agent.OGZ
APEX	Malicious
ClamAV	Win.Trojan.Antavmu-523
Kaspersky	UDS:Virus.DOS.Moctezuma.2416
BitDefender	Gen:Trojan.FileInfector.eGW@a0SquDf
NANO-Antivirus	Trojan.Win32.Antavmu.dhwgp
ViRobot	Trojan.Win32.A.Antavmu.74752
Avast	Win32:MalwareX-gen [Trj]
Tencent	Trojan.Win32.Agent.mgr
Emsisoft	Gen:Trojan.FileInfector.eGW@a0SquDf (B)
F-Secure	Trojan.TR/Antavmu.doena
DrWeb	Trojan.Siggen8.42052
Zillya	Trojan.KillFilesGen.Win32.1
TrendMicro	TSPY_ANTAVMU_BK08301E.TOMC
McAfee-GW-Edition	BehavesLike.Win32.Sality.lh
Trapmine	malicious.high.ml.score
Sophos	Mal/Antavmu-A
Ikarus	Backdoor.Poison
GData	Gen:Trojan.FileInfector.eGW@a0SquDf
Jiangmin	Trojan.Antavmu.chz
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/Antavmu.doena
MAX	malware (ai score=81)
Antiy-AVL	RiskWare[RiskTool]/Win32.Killfiles.neh
Xcitium	TrojWare.Win32.KillFiles.NEH@4qfvz0
Arcabit	Trojan.FileInfector.E09A77
SUPERAntiSpyware	Worm.Antavmu
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Antavmu.D
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Antavmu.R25058
McAfee	Dropper-FAH!7B63E629C159
TACHYON	Worm/W32.FileInfector.74752
VBA32	BScope.Trojan.Downloader
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TSPY_ANTAVMU_BK08301E.TOMC
Rising	Trojan.Win32.Antavmu.b (CLASSIC)
Yandex	Trojan.GenAsa!mLg/yf6hjK0
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Antavmu.JWS!tr
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)