Categories: Malware

Should I remove “Win32/Ketrican.AD”?

The Win32/Ketrican.AD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Ketrican.AD virus can do?

A process attempted to delay the analysis task.
Performs some HTTP requests
Executed a very long command line or script command which may be indicative of chained commands or obfuscation
A scripting utility was executed
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

www.bing.com

areas.pesosnews.com

How to determine Win32/Ketrican.AD?


File Info:
crc32: F62BDF21md5: 68a0c124cd6bc2a6baca29406dafcd67name: 68A0C124CD6BC2A6BACA29406DAFCD67.mlwsha1: 57d47348f721165ddf42393ff3e1dd07d386f66fsha256: 5287e523f49ba7ac3841114d44b01057a9392f3052d9a0de1828559d5dd4b8b2sha512: 8643b0ca75ff33a305d82e05dd55a158f9dc712f626a23aff8c9213b0b6baa9800be1fac37b5ca4bec52e9673b925ef8cba76acc5ed34ecb0590e24a1c6a7ff2ssdeep: 1536:YH8ztDxL3oltTBKNRde5B7Q/s9FvkDn+nTy/I4DW:c85DxL30TBCdkNBPTyXDtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Ketrican.AD also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0055c7891 )
Lionic	Trojan.Multi.GenericML.4!c
Elastic	malicious (high confidence)
DrWeb	BackDoor.Siggen2.3039
Cynet	Malicious (score: 100)
ALYac	Trojan.Agent.Ke3chang
Cylance	Unsafe
Zillya	Trojan.Ketrican.Win32.14
Sangfor	Trojan.Win32.GenericML.xnet
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Ketrican.ca2c42b6
K7GW	Trojan ( 0055c7891 )
Cybereason	malicious.8f7211
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Ketrican.AD
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	UDS:Trojan.Multi.GenericML.xnet
BitDefender	Trojan.GenericKD.47102958
NANO-Antivirus	Trojan.Win32.Ketrican.gjyoxj
ViRobot	Trojan.Win32.Z.Ketrican.92672
MicroWorld-eScan	Trojan.GenericKD.47102958
Tencent	Win32.Trojan.Generic.Wqmy
Ad-Aware	Trojan.GenericKD.47102958
Sophos	Mal/Generic-S
Comodo	Malware@#1k6uojruxuyoc
BitDefenderTheta	Gen:NN.ZexaF.34266.fqW@a42qWkh
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_FRS.0NA103L619
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.68a0c124cd6bc2a6
Emsisoft	Trojan.GenericKD.47102958 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1131098
eGambit	Unsafe.AI_Score_81%
Antiy-AVL	Trojan/Generic.ASMalwS.2D51E8E
Microsoft	Trojan:Win32/Occamy.C52
Arcabit	Trojan.Generic.D2CEBBEE
GData	Trojan.GenericKD.47102958
AhnLab-V3	Dropper/Win32.Agent.C1984834
McAfee	Artemis!68A0C124CD6B
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Occamy
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_FRS.0NA103L619
Rising	Trojan.Generic@ML.87 (RDMK:RVXNG5MbXFzvOoRuhSZCpQ)
Yandex	Trojan.Ketrican!AyrFYvmpaZE
Ikarus	Trojan.Win32.Ketrican
MaxSecure	Trojan.Malware.73700134.susgen
Fortinet	W32/Ketrican.AD!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml