Categories: Virus

Virus:Win32/Relnek.A malicious file

The Virus:Win32/Relnek.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus:Win32/Relnek.A virus can do?

At least one process apparently crashed during execution
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Enumerates running processes
Manipulates data from or to the Recycle Bin
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Behavioural detection: Injection (inter-process)
Likely virus infection of existing system binary
Anomalous binary characteristics

How to determine Virus:Win32/Relnek.A?


File Info:
name: 3477144AFD1441A6F10A.mlwpath: /opt/CAPEv2/storage/binaries/2f5eec5ec68a97416b1747967a3262531dec677a4463db86933194db7e8be95dcrc32: 1A466F8Dmd5: 3477144afd1441a6f10a2957ef7660d6sha1: 017c07bcc5a45f9c91b6ac6803eb8b810810da59sha256: 2f5eec5ec68a97416b1747967a3262531dec677a4463db86933194db7e8be95dsha512: cb9c7c13090703e47decc92e32640731a1729978c62b11b294dad33d6f6fc197243c1f910b975d293fcd6c208b64d58933edd7252d36065d5704589b3a76a7d2ssdeep: 12288:EqOPajQUXXP8QvLWFx6MW5rippDC7ee1hpls4Ey+JA6z:EnajQEPnvg6FhWDC750type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10E453A90F2C1C4B6D49711724DAADA3021A7BE588B7497DF615E370D9AB33C3247AF0Asha3_384: 6e23c2b08d231cf73b0c4fef34afd3c45daf219e4499db2897cf4168db90287d601e310beba37ba32082b1752f15cf76ep_bytes: 558bec505251535657baa0c20400b800timestamp: 2006-08-28 07:08:09
Version Info:
CompanyName: Adobe Systems IncorporatedFileDescription: Adobe Help ViewerFileVersion: 1.0.0.185InternalName: Adobe Help ViewerLegalCopyright: (C) 2006 Adobe Systems Incorporated. All rights reserved.OriginalFilename: ahv.exeProductName: Adobe Help ViewerProductVersion: 1.0Translation: 0x0000 0x04b0

Virus:Win32/Relnek.A also known as:

Bkav	W32.SawSailsNNA.PE
Lionic	Virus.Win32.Agent.n!c
MicroWorld-eScan	Win32.Relnek.A
FireEye	Generic.mg.3477144afd1441a6
CAT-QuickHeal	W32.Agent.CX
McAfee	W32/Relnek
Cylance	Unsafe
Zillya	Virus.Agent.Win32.33
Sangfor	Virus.Win32.Agent.cx
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Virus:Win32/Relnek.74e0376f
K7GW	Virus ( 001219a61 )
K7AntiVirus	Virus ( 001219a61 )
Baidu	Win32.Virus.Relnek.a
VirIT	Win32.Relnek.A
Cyren	W32/Relnek.A.gen!Eldorado
Symantec	W32.Relnek.A
ESET-NOD32	Win32/Agent.NAW
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Virus.Win32.Agent.cx
BitDefender	Win32.Relnek.A
NANO-Antivirus	Virus.Win32.Agent.kfrya
Avast	Win32:Mirecek [Inf]
Tencent	Virus.Win32.Agent.gee
Sophos	W32/Relnek-A
Comodo	Virus.Win32.Relnek.A0@1n9lrd
DrWeb	Win32.Relnek.1
VIPRE	Virus.Win32.Relnek.a (v)
TrendMicro	PE_RELNEK.A
McAfee-GW-Edition	BehavesLike.Win32.Virut.th
Emsisoft	Win32.Relnek.A (B)
Jiangmin	Win32/Agent.o
Avira	W32/Relnek.A
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASVirus.74
Gridinsoft	Ransom.Win32.Zbot.sa
Microsoft	Virus:Win32/Relnek.A
ViRobot	Win32.Relnek.A
GData	Win32.Relnek.A
AhnLab-V3	Win32/Relnek.X892
BitDefenderTheta	AI:FileInfector.662564C20E
ALYac	Win32.Relnek.A
VBA32	BScope.TrojanSpy.Zbot
TrendMicro-HouseCall	PE_RELNEK.A
Rising	Virus.Relnek!1.9B0F (CLASSIC)
Yandex	Win32.Relnek.A
MaxSecure	Virus.W32.Agent.CX
Fortinet	W32/Relnek.A
AVG	Win32:Mirecek [Inf]
Cybereason	malicious.afd144
Panda	W32/Relnek.A