Categories: Trojan

Win32/TrojanClicker.Small.NDF malicious file

The Win32/TrojanClicker.Small.NDF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanClicker.Small.NDF virus can do?

CAPE extracted potentially suspicious content
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the embedded win api malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/TrojanClicker.Small.NDF?


File Info:
name: A7F688FA3636AD2FCAE2.mlwpath: /opt/CAPEv2/storage/binaries/1f7b186a9f01d4b568ea919d5e215b634b1ebf1f6c32b5cbc83a3e735e91949fcrc32: 375BFB59md5: a7f688fa3636ad2fcae26c9611c6a190sha1: aa88813c30db05ae3c32c8ee4199f9321749e25dsha256: 1f7b186a9f01d4b568ea919d5e215b634b1ebf1f6c32b5cbc83a3e735e91949fsha512: b1ded61a0a6928ee921e9f90c3249b2acd573af130d9b96c727bff7fcba1bffabba2c04e57e1ef34e7a47085213e7ed5c42294514a217f82d2f2c95e45064bf0ssdeep: 1536:DQEofGE6AlUwoG/su13qClQX2oooD+AyxArwIVJ9dMNYR:DQxGELUxu1a8QXMmwI/wYRtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D783F243EF446E1AF43989745897C6E65E3ADE6CCCA5CA718480FC530C762AB253F319sha3_384: c1a4640cb5bfa654ba09bccd2a1fa32b29b330fc6ca0d28bbe9beba2175819bb4e670d3fa1e71afecb8e727dc6b84040ep_bytes: 60e8b70000002e400200000000000000timestamp: 2014-01-07 11:49:58
Version Info:
Comments: CompanyName: FileDescription: Microsoft(R) Windows(R) Operating SystemFileVersion: 6, 0, 2900, 5512InternalName: LegalCopyright: 版权所有 (C) 2013LegalTrademarks: OriginalFilename: PrivateBuild: ProductName: Microsoft ProductVersion: 6.00.2900.5512SpecialBuild: Translation: 0x0804 0x04b0

Win32/TrojanClicker.Small.NDF also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Llac.le6i
MicroWorld-eScan	Gen:Trojan.Heur.fu0@rHtl2Kcbh
ClamAV	Win.Trojan.Agent-1364161
FireEye	Generic.mg.a7f688fa3636ad2f
CAT-QuickHeal	Trojan.Llac.A.mue
Skyhigh	BehavesLike.Win32.Infected.mh
McAfee	Packed-AK!A7F688FA3636
Cylance	unsafe
Zillya	Trojan.Llac.Win32.45571
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0040f7fd1 )
Alibaba	Backdoor:Win32/Emager.ab5e4ac3
K7GW	Trojan ( 0040f7fd1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	AI:Packer.9A34A0091D
VirIT	Trojan.Win32.Generic.BQPU
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/TrojanClicker.Small.NDF
Zoner	Probably Heur.ExeHeaderL
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Emager.ngb
BitDefender	Gen:Trojan.Heur.fu0@rHtl2Kcbh
NANO-Antivirus	Trojan.Win32.FKM.dsobxk
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Win32.Dropper.abe
Emsisoft	Gen:Trojan.Heur.fu0@rHtl2Kcbh (B)
Baidu	Win32.Trojan.Kryptik.av
F-Secure	Trojan.TR/Crypt.FKM.Gen
DrWeb	Trojan.Siggen6.14220
VIPRE	Gen:Trojan.Heur.fu0@rHtl2Kcbh
TrendMicro	TROJ_GEN.R002C0DB324
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.TrojanClicker
GData	Gen:Trojan.Heur.fu0@rHtl2Kcbh
Jiangmin	Trojan.Emager.aoh
Webroot	W32.Malware.gen
Google	Detected
Avira	TR/Crypt.FKM.Gen
Antiy-AVL	Trojan/Win32.Llac
Kingsoft	malware.kb.a.997
Xcitium	TrojWare.Win32.BHO.NJYY@56oayy
Arcabit	Trojan.Heur.EB47EA
ViRobot	Trojan.Win.Z.Llac.86016.CS
ZoneAlarm	Trojan.Win32.Emager.ngb
Microsoft	Backdoor:Win32/Dusenr.A
Varist	W32/Cnezz.A.gen!Eldorado
AhnLab-V3	Trojan/Win32.ADH.C116687
VBA32	TScope.Malware-Cryptor.SB
ALYac	Gen:Trojan.Heur.fu0@rHtl2Kcbh
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DB324
Rising	Backdoor.Dusenr!1.A20B (CLASSIC)
Yandex	Trojan.Llac!G/z4jXWLeEQ
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.7016547.susgen
Fortinet	W32/Agent.AGDA!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.c30db0
DeepInstinct	MALICIOUS