Categories: Malware

Win32/Syndicasec.F (file analysis)

The Win32/Syndicasec.F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Syndicasec.F virus can do?

A process attempted to delay the analysis task.
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Creates a hidden or system file
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

kumar807.blogspot.com

kumar807.wordpress.com

kumar807.livejournal.com

How to determine Win32/Syndicasec.F?


File Info:
crc32: AE5EB887md5: 68bfa1b82dc0e2de10d0cf8551938deaname: a3667153a6322fb8d4cf8869c094a05e995e2954fda833fe14304837ed4fd0bdsha1: 0cf43f74f078fa4af30f589101a59c9860481b30sha256: a3667153a6322fb8d4cf8869c094a05e995e2954fda833fe14304837ed4fd0bdsha512: a3e375772eab6b7f8eeedceb54f4e1d041caf3dc1cde03d928e3101de37352082b37ea925fcffe7f46132fa146a5e6db042ac0b0093ac1d8cc00dca9218e22dcssdeep: 768:j5QGuIOFwKTMAj3cdXhwlJsYd+mq8ywmgiR+hYHAGQ:VsIOFwKT/BlJsYFq8ye5WQtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Syndicasec.F also known as:

MicroWorld-eScan	Gen:Variant.Symmi.59398
FireEye	Generic.mg.68bfa1b82dc0e2de
CAT-QuickHeal	Trojan.MauvaiseRI.S5260832
ALYac	Gen:Variant.Symmi.59398
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Gen:Variant.Symmi.59398
K7GW	Trojan ( 004a0b431 )
K7AntiVirus	Trojan ( 004a0b431 )
TrendMicro	TROJ_SYNDICASEC.A
BitDefenderTheta	Gen:NN.ZexaF.34090.dqW@aiU05dgb
Cyren	W32/WMIGhost.A.gen!Eldorado
Symantec	Trojan.Syndicasec
TrendMicro-HouseCall	TROJ_SYNDICASEC.A
Paloalto	generic.ml
ClamAV	Win.Trojan.Syndicasec-6609573-0
Kaspersky	Trojan.Win32.DLLhijack.ei
Alibaba	Trojan:Win32/Syndicasec.ef8423c2
NANO-Antivirus	Trojan.Win32.Dwn.deefhc
AegisLab	Trojan.Win32.DLLhijack.4!c
APEX	Malicious
Tencent	Malware.Win32.Gencirc.10b3dff9
Ad-Aware	Gen:Variant.Symmi.59398
Sophos	Troj/Thetatic-O
Comodo	Malware@#13ua98cn1bsm2
F-Secure	Trojan.TR/DLLhijack.jzvgf
DrWeb	Trojan.Wmighost.9
Zillya	Trojan.Agentb.Win32.5284
Invincea	heuristic
McAfee-GW-Edition	GenericR-FMW!68BFA1B82DC0
Emsisoft	Gen:Variant.Symmi.59398 (B)
SentinelOne	DFI – Suspicious PE
GData	Gen:Variant.Symmi.59398
Jiangmin	Trojan.Agentb.qf
MaxSecure	Trojan.Malware.7401653.susgen
Avira	HEUR/AGEN.1018775
MAX	malware (ai score=84)
Microsoft	Trojan:Win32/Syndicasec
Endgame	malicious (high confidence)
Arcabit	Trojan.Symmi.DE806
SUPERAntiSpyware	Trojan.Agent/Gen-Malagent
ZoneAlarm	Trojan.Win32.DLLhijack.ei
AhnLab-V3	Trojan/Win32.Agentb.R139589
Acronis	suspicious
McAfee	GenericR-FMW!68BFA1B82DC0
VBA32	Trojan.Agentb
ESET-NOD32	Win32/Syndicasec.F
Rising	Backdoor.Weemurl!8.31ED (CLOUD)
Yandex	Trojan.Agentb!+O/38dHvHR4
Ikarus	Trojan.Win32.Syndicasec
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Agentb.BEVF!tr
Webroot	W32.Gen.BT
F-Prot	W32/WMIGhost.A.gen!Eldorado
Cybereason	malicious.82dc0e
Panda	Trj/CI.A
Qihoo-360	HEUR/QVM41.1.Malware.Gen