Categories: Virus

Virus:Win32/Triusor.A malicious file

The Virus:Win32/Triusor.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus:Win32/Triusor.A virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Reads data out of its own binary image
Manipulates data from or to the Recycle Bin
Authenticode signature is invalid
Checks for the presence of known devices from debuggers and forensic tools
Harvests cookies for information gathering
Anomalous binary characteristics

How to determine Virus:Win32/Triusor.A?


File Info:
name: 411FA7A69D0ACB0FE4EE.mlwpath: /opt/CAPEv2/storage/binaries/eb3c21418e5eda170134d0cf06ed847ae77de2418e814fec3148b4efc81e82dfcrc32: 41E63D2Amd5: 411fa7a69d0acb0fe4ee4f7742028467sha1: 9820da8aebb915cd6dd63711d91d805203166861sha256: eb3c21418e5eda170134d0cf06ed847ae77de2418e814fec3148b4efc81e82dfsha512: 6779deac69ba3c80908c87dbd8f5367c86ff73fe15a2101cada896512561074707f092ca3d3aa98231e47a7a952033edc0c6046fb786f8750eec38d5e9988468ssdeep: 1536:ug7DHaVCkO8XyUKdujCc66m5tvKbUOQNieF2FfHYTo7jcgZDzwoqLEzTI:v7AFfCGReFwfHYToMgZ3woqLE3type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T105C38D29B591C0B7D016157128BAC3711A7EFC3245B9C84B7B897B7E1F722C0AA2B753sha3_384: 8e5c505e909992473da59abab73afb31ad5ff139986f7cba5fa9a24a97076b085145519e0f0aec30bead271caeb137acep_bytes: 558bec6aff6808f1410068d8b0410064timestamp: 2018-04-16 09:24:11
Version Info:
0: [No Data]

Virus:Win32/Triusor.A also known as:

Bkav	W32.AIDetect.malware2
DrWeb	Win32.HLLW.Unjap.293
MicroWorld-eScan	Win32.Triusor.A
CAT-QuickHeal	W32.Triusor.A7
ALYac	Win32.Triusor.A
Cylance	Unsafe
Sangfor	[ARMADILLO V1.71]
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
Cybereason	malicious.69d0ac
BitDefenderTheta	AI:FileInfector.AD9B3E700F
VirIT	Win32.Unjap.A
Cyren	W32/Triusor.A
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Resur.I
TrendMicro-HouseCall	Virus.Win32.TRIUSOR.A
ClamAV	Win.Virus.Triusor-6916681-0
Kaspersky	Virus.Win32.Agent.fn
BitDefender	Win32.Triusor.A
NANO-Antivirus	Virus.Win32.Infector.eazaig
Avast	Win32:Malware-gen
Tencent	Virus.Win32.Agent.fn
Ad-Aware	Win32.Triusor.A
Emsisoft	Win32.Triusor.A (B)
Comodo	TrojWare.Win32.Nimnul.A@5waoem
F-Secure	Heuristic.HEUR/AGEN.1240750
TrendMicro	Virus.Win32.TRIUSOR.A
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.ch
FireEye	Generic.mg.411fa7a69d0acb0f
Sophos	ML/PE-A + W32/Triusor-A
Ikarus	Gen.Win32.FileInfector
GData	Win32.Trojan.PSE.133ZQKN
Avira	HEUR/AGEN.1240750
Arcabit	Win32.Triusor.A
ZoneAlarm	Virus.Win32.Agent.fn
Microsoft	Virus:Win32/Triusor.A
Cynet	Malicious (score: 100)
AhnLab-V3	Win32/Resur.X1604
McAfee	W32/Triusor.A
MAX	malware (ai score=89)
VBA32	Virus.Win32.Triusor
Malwarebytes	Malware.AI.1781825151
APEX	Malicious
Rising	Trojan.Generic@AI.79 (RDMK:cmRtazqMHHL+5SAK+4qcmAyCX4nF)
Yandex	Trojan.GenAsa!BugRQtpcKNg
MaxSecure	Virus.Agent.FN
Fortinet	W32/Agent.FN
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (D)