Categories: Trojan

Win32/TrojanDownloader.Small.BFX removal guide

The Win32/TrojanDownloader.Small.BFX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Small.BFX virus can do?

Attempts to connect to a dead IP:Port (7 unique times)
Drops a binary and executes it
Performs some HTTP requests
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

www.practicalmalwareanalysis.com

apps.identrust.com

crl.identrust.com

r3.o.lencr.org

redirector.gvt1.com

r8—sn-bpb5oxu-3c2r.gvt1.com

update.googleapis.com

How to determine Win32/TrojanDownloader.Small.BFX?


File Info:
crc32: F9BA3F50md5: 56bed8249e7c2982a90e54e1e55391a2name: 56BED8249E7C2982A90E54E1E55391A2.mlwsha1: 92c1802eeec9c5a15af83961e53c07b04476bd4asha256: e2aed4398e0178670d9678961ca89a0f15a3eac20f396bdf29de8ac66cb853fasha512: b68da6d1a55636524685d66ddecf1df89edba720a015eed1d8c50b3ebbcb19ecb5db1cd9f85103deeaaccc62fbdd4cc74fed4e3e54e1537ba6df0c8b6e57fbb0ssdeep: 96:R0MgAr71nxY9AAIvqZ2ZNHHsP4oynLKcm5OzG38U6p2WL4P4oyn:SJaPLjC2ZNHMP4oynLKL38jp2VP4oyntype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/TrojanDownloader.Small.BFX also known as:

K7AntiVirus	Trojan-Downloader ( 0055e3da1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader5.60705
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Cerbu.64782
Cylance	Unsafe
Zillya	Downloader.Small.Win32.47818
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:Win32/DownLdr.6cd1a38a
K7GW	Trojan-Downloader ( 0055e3da1 )
Cybereason	malicious.49e7c2
Cyren	W32/Heuristic-217!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.Small.BFX
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
ClamAV	Win.Trojan.Agent-375080
Kaspersky	HEUR:Trojan-Downloader.Win32.Generic
BitDefender	Gen:Variant.Cerbu.64782
NANO-Antivirus	Trojan.Win32.Kazy.cwxmfl
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
MicroWorld-eScan	Gen:Variant.Cerbu.64782
Tencent	Malware.Win32.Gencirc.10b73f07
Ad-Aware	Gen:Variant.Cerbu.64782
Sophos	Mal/Generic-R
Comodo	Suspicious@#298ptgqm5edu3
F-Secure	Trojan.TR/Dldr.Small.romlh
BitDefenderTheta	AI:Packer.09F6DB271F
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_DLDER
McAfee-GW-Edition	BehavesLike.Win32.Downloader.nz
FireEye	Generic.mg.56bed8249e7c2982
Emsisoft	Gen:Variant.Cerbu.64782 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Invader.cph
Webroot	W32.Trojan.Gen
Avira	TR/Dldr.Small.romlh
eGambit	Unsafe.AI_Score_89%
Antiy-AVL	Trojan[Downloader]/Win32.Unknown
Kingsoft	Win32.Troj.Undef.(kcloud)
Arcabit	Trojan.Cerbu.DFD0E
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Cerbu.64782
AhnLab-V3	Downloader/Win32.Small.C2471360
McAfee	GenericRXEW-DZ!56BED8249E7C
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Downloader
Malwarebytes	Malware.AI.1254955992
TrendMicro-HouseCall	Mal_DLDER
Rising	Downloader.Small!8.B41 (CLOUD)
Yandex	Trojan.DL.Small!io4/0V8aERQ
Ikarus	Backdoor.Win32.SuspectCRC
MaxSecure	Trojan.Malware.23478.susgen
Fortinet	W32/Generic.AC.345C6F!tr
AVG	Win32:DropperX-gen [Drp]
Paloalto	generic.ml
Qihoo-360	Win32/TrojanDownloader.Small.HykCEpsA