Malware

Win32/Desktop2345.C potentially unwanted removal guide

Malware Removal

The Win32/Desktop2345.C potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Desktop2345.C potentially unwanted virus can do?

  • Presents an Authenticode digital signature
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Uses Windows utilities for basic functionality

Related domains:

jifen.2345.com

How to determine Win32/Desktop2345.C potentially unwanted?


File Info:

crc32: 4A9D7232
md5: c92b7624cf1dd4698322595506617570
name: p5_kluoz_v6.5.exe
sha1: fcc2824d806fc023341351ca93e8b856a48c8ca0
sha256: 132f7de1fb918efe3d81c11119256f70701e43a49be79210e9160a2dc4e32eb1
sha512: 70ba451209aee4fbc35f91288065792d2c37fd74b4bdf7891c5e6493351466e17a2908a02ca1bec6035542ba4f2cb37de128f69e091ad0cff69ff89657e5fb74
ssdeep: 98304:9d4ZDKWfP94q7pgrOT/rtBC2Z87S7pvCOPFFksiXw7d:M45oC2Z8gpvCOPFF9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright(c)Shanghai 2345 Network Technology Co., Ltd.
InternalName: 2345ComputerTools
FileVersion: 4.18.1.0
CompanyName: Shanghai 2345 Network Technology Co., Ltd.
Comments: 2345ComputerTools
ProductName: x6d4fx89c8x5668x63a8x5e7fx5305x7075x6d3bx5b9ax5236x7248
ProductVersion: 4.18.1.0
FileDescription: x6d4fx89c8x5668x63a8x5e7fx5305x7075x6d3bx5b9ax5236x7248
OriginalFilename: 2345ComputerTools
Translation: 0x0409 0x04b0

Win32/Desktop2345.C potentially unwanted also known as:

CylanceUnsafe
K7AntiVirusRiskware ( 004ef0831 )
K7GWRiskware ( 004ef0831 )
Invinceaheuristic
ESET-NOD32a variant of Win32/Desktop2345.C potentially unwanted
APEXMalicious
AvastWin32:Malware-gen
GDataWin32.Application.Agent.WIS5VC
NANO-AntivirusRiskware.Win32.Mlw.fgfpsz
Endgamemalicious (moderate confidence)
ComodoMalware@#1nrf5aqpu70s8
ZillyaTool.Desktop2345.Win32.11
SophosGeneric PUA PM (PUA)
IkarusPUA.RiskWare.Desktop2345
CyrenW32/Application.VSOW-0054
MaxSecureTrojan.Malware.74484163.susgen
Antiy-AVLTrojan/Win32.RiskWare
MicrosoftPUA:Win32/2345Cn
TencentMalware.Win32.Gencirc.10b0806f
YandexRiskWare.Agent!
FortinetRiskware/Desktop2345
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Win32/Desktop2345.C potentially unwanted?

Win32/Desktop2345.C potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment