Categories: Spy

About “Win32/Spy.Grandoreiro.AT” infection

The Win32/Spy.Grandoreiro.AT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Grandoreiro.AT virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Portuguese (Brazilian)
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Spy.Grandoreiro.AT?


File Info:
crc32: 2E8434DBmd5: ea4dcce5d2cb8016c243da411d072016name: upload_filesha1: e56f839a6a5f344f8398dc79a0f0f0e1a2be72e0sha256: fa081a6c89433b571eb2755f1867108eb457ee81a145cd39870647a6d402134esha512: 831b3f32a6badae1eef1b5fdff07f452e21ee2f9ad54babcb50171bcbb95de7d7273feaae2b7b9fe26fc50163325e3000e9967573d33e0e4cc3a345705ff3807ssdeep: 49152:sPv6gIcjjXfzMiptpyTpVP5fFHjADRamoCbdsS/Fj4YSIGIIX/KAph65R7/tY3U:sXZdYiwFyz3TFD53qetype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Spy.Grandoreiro.AT also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Trojan.GenericKD.43940549
McAfee	Artemis!EA4DCCE5D2CB
Cylance	Unsafe
K7AntiVirus	Spyware ( 0056fa701 )
BitDefender	Trojan.GenericKD.43940549
K7GW	Spyware ( 0056fa701 )
Cybereason	malicious.a6a5f3
Arcabit	Trojan.Generic.D29E7AC5
Invincea	Mal/Generic-S
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Banker.Win32.Grandoreiro.gen
Alibaba	TrojanSpy:Win32/Grandoreiro.57cebecd
Ad-Aware	Trojan.GenericKD.43940549
Emsisoft	Trojan.GenericKD.43940549 (B)
F-Secure	Heuristic.HEUR/AGEN.1137975
McAfee-GW-Edition	BehavesLike.Win32.Dropper.wt
FireEye	Generic.mg.ea4dcce5d2cb8016
Ikarus	Trojan-Spy.Agent
Avira	HEUR/AGEN.1137975
Microsoft	Trojan:Win32/Wacatac.C!ml
AegisLab	Trojan.Win32.Grandoreiro.7!c
ZoneAlarm	HEUR:Trojan-Banker.Win32.Grandoreiro.gen
GData	Trojan.GenericKD.43940549
Cynet	Malicious (score: 85)
MAX	malware (ai score=83)
ESET-NOD32	a variant of Win32/Spy.Grandoreiro.AT
Tencent	Win32.Trojan-banker.Grandoreiro.Akoz
SentinelOne	DFI – Malicious PE
Fortinet	PossibleThreat.PALLAS.H
BitDefenderTheta	Gen:NN.ZelphiF.34282.@JW@aaEZ8vxQ
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Win32/Trojan.46d