Categories: Malware

W32/CTSInf-A removal guide

The W32/CTSInf-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What W32/CTSInf-A virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Harvests cookies for information gathering

How to determine W32/CTSInf-A?


File Info:
name: AC291DC8F2610AD5DF3C.mlwpath: /opt/CAPEv2/storage/binaries/e12e3a45524bfd0aebc4db7ebd33ddea26685e7f6c4f6a0c59a19405701d3544crc32: 8DAA9B33md5: ac291dc8f2610ad5df3c4a043e4c951dsha1: a1cf18ef2787fe45ee9dbc556d2570a148635ad8sha256: e12e3a45524bfd0aebc4db7ebd33ddea26685e7f6c4f6a0c59a19405701d3544sha512: d318a2a2a881a7061efaab12d8d53a4ef41ccca5b58616eefa47822a6290a33e68c7d64a8ad9dff07299a8776a8a76f13df59d92c071c2bff47ece09ae88297dssdeep: 1536:scNjQlsWjcdiTuXbELbGn82i+beoecNjQlsWjcdiTuXbELbGn82i+beot:vjr5ELbGnzi+aoJjr5ELbGnzi+aottype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19AF36C133AD58471E07A4A3908B486115A3BBDF15EB49CAB77C8119E4EB22C19F78F37sha3_384: 6fa12d8713880c356645b09670e2d6a80a5c601021e4158a96be46977e4622c6fadf571717aa6aa05655da430a976d6bep_bytes: e821110000e97ffeffff558bec8325a8timestamp: 2015-05-05 13:45:31
Version Info:
0: [No Data]

W32/CTSInf-A also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.37390325
FireEye	Generic.mg.ac291dc8f2610ad5
CAT-QuickHeal	Trojan.GenericIH.S16230668
ALYac	Trojan.GenericKD.37390325
Malwarebytes	Trojan.Dropper.VBS
VIPRE	Trojan.GenericKD.37390325
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00561d541 )
K7GW	Trojan ( 00561d541 )
Cybereason	malicious.8f2610
BitDefenderTheta	AI:Packer.4E7E9A7B1E
VirIT	Trojan.Win32.Genus.CMD
Cyren	W32/Ransom.KX.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Agent.NCK
APEX	Malicious
ClamAV	Win.Malware.Zusy-9957983-0
Kaspersky	HEUR:Trojan-Dropper.Win32.Daws.gen
BitDefender	Trojan.GenericKD.37390325
NANO-Antivirus	Trojan.Win32.TP.fwrmck
SUPERAntiSpyware	Trojan.Agent/Gen-Malagent
Avast	Win32:MalwareX-gen [Trj]
Emsisoft	Trojan.GenericKD.37390325 (B)
F-Secure	Heuristic.HEUR/AGEN.1315573
DrWeb	Trojan.DownLoader23.51365
Zillya	Trojan.Generic.Win32.1241800
McAfee-GW-Edition	BehavesLike.Win32.Ctsinf.cm
Trapmine	malicious.high.ml.score
Sophos	W32/CTSInf-A
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Agent.AXD
Jiangmin	Trojan.Agent.cemd
Google	Detected
Avira	HEUR/AGEN.1315573
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.Agent
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Generic.D23A87F5
ViRobot	Win32.CTS.A
ZoneAlarm	HEUR:Trojan-Dropper.Win32.Daws.gen
Microsoft	Trojan:Win32/Prepscram.A!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Packed/Win32.Generic.R361447
McAfee	W32/Ctsinf.a
VBA32	Trojan.Agent
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Virus.CTS!1.DA0D (CLASSIC)
Ikarus	Virus.Win32.CeeInject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.NCK
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)