Win32/Rostpay.C potentially unwanted malicious file

The Win32/Rostpay.C potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Rostpay.C potentially unwanted virus can do?

• Sample contains Overlay data
• Reads data out of its own binary image
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Win32/Rostpay.C potentially unwanted?

File Info:
name: 077F36F6E0EFE6F3D3DC.mlw
path: /opt/CAPEv2/storage/binaries/2c5e13541ce7b6cacff526344214f86ad78562c0bef8d260b8fa13da453e7cbc
crc32: 8511AE3B
md5: 077f36f6e0efe6f3d3dcf53981dd0ac9
sha1: e0ba8cdd850d380fa93d49e352c180666eb17c80
sha256: 2c5e13541ce7b6cacff526344214f86ad78562c0bef8d260b8fa13da453e7cbc
sha512: fe8cba9350cea123e3507f0d61d143bf90e2b374f8beeb62d044bea0312314df0ab4013ac61d0aaca4ca077480ea6dd7cfd6c3e2b4191efb7b1f4e1024a6cd31
ssdeep: 49152:PebmYI+n3Fur0qINhvWoYJEHjDrKwRGNouBgpt1ry5LSPM6dFe:GySFE0RhvLbDfQlidrQLfyFe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12EB53304AAE0C46FF4710A70DC6292F34928BC346D70C9A76758BFFA78347859D2DA97
sha3_384: 72272051b40c58be89da7f2870c4aacbe2cdb1ce420fe9204c5d4668e715dd8c5e9ec0449bcb4ca57961cc3a39f9e842
ep_bytes: 81ecd4020000535556576a2033ed5e89
timestamp: 2012-02-24 19:19:59

Version Info:
0: [No Data]

Win32/Rostpay.C potentially unwanted also known as:

How to remove Win32/Rostpay.C potentially unwanted?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.