Categories: Trojan

Win32/TrojanDownloader.Unruy.BK removal

The Win32/TrojanDownloader.Unruy.BK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Unruy.BK virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Creates a slightly modified copy of itself
Anomalous binary characteristics

How to determine Win32/TrojanDownloader.Unruy.BK?


File Info:
crc32: 6EB7B340md5: db5c68ce055ca145edda7ccf1d12105aname: DB5C68CE055CA145EDDA7CCF1D12105A.mlwsha1: 4fbede9b05a32bdbb5f7708bd999d751e229dff2sha256: 9d0fe3c7832f6d1c0de053f4636dbb901bc8f101c4373b8125fe376a2a54826dsha512: fbea85f2f7048862b508ec8a7117b6aee00a36eabaf4889bf526bb820c1c7ea3315ebdd6dacddfa3f41ab769e0bfb468b8a1edce6f1a49a8e24735464e55f086ssdeep: 12288:rjj6aTwhG1kaK2tDKEm79iLdJBdZR/nX6:rjnWG6aCt7UdDPR/Ktype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/TrojanDownloader.Unruy.BK also known as:

Bkav	W32.MSnacroasa.Worm
Elastic	malicious (high confidence)
DrWeb	Trojan.Click.33553
MicroWorld-eScan	Gen:Variant.Unruy.1
FireEye	Generic.mg.db5c68ce055ca145
CAT-QuickHeal	Downloader.Unruy.16638
ALYac	Gen:Variant.Unruy.1
Cylance	Unsafe
VIPRE	Trojan-Downloader.Win32.Unruy.C (v)
AegisLab	Trojan.Win32.Cycler.l2bS
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 001150081 )
BitDefender	Gen:Variant.Unruy.1
K7GW	Trojan-Downloader ( 001150081 )
Cybereason	malicious.e055ca
BitDefenderTheta	AI:Packer.171581181E
Cyren	W32/Trojan.CRZM-3028
Symantec	Infostealer
TotalDefense	Win32/Unruy.F
TrendMicro-HouseCall	TROJ_UNRUY.SMT
Avast	Win32:Unruy-AA [Trj]
ClamAV	Win.Trojan.Agent-190503
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	TrojanDownloader:Win32/Unruy.33eb137e
NANO-Antivirus	Trojan.Win32.Cycler.vrwmp
ViRobot	Trojan.Win32.Generic.67766
Tencent	Adware.Win32.Clicker.a
Ad-Aware	Gen:Variant.Unruy.1
Sophos	ML/PE-A + Troj/Dropr-CH
Comodo	TrojWare.Win32.TrojanClicker.Cycler.A@1es5wl
Baidu	Win32.Trojan-Clicker.Cycler.a
Zillya	Trojan.Cycler.Win32.33
TrendMicro	TROJ_UNRUY.SMT
McAfee-GW-Edition	BehavesLike.Win32.Downloader.gm
Emsisoft	Gen:Variant.Unruy.1 (B)
Ikarus	Trojan-Downloader.Win32.Unruy
Jiangmin	TrojanClicker.Cycler.z
Avira	TR/Click.Cycler.AE
MAX	malware (ai score=87)
Antiy-AVL	Trojan[Clicker]/Win32.Cycler
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	TrojanDownloader:Win32/Unruy.C
Arcabit	Trojan.Unruy.1
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Unruy.1
Cynet	Malicious (score: 100)
AhnLab-V3	Win32/Unruy.C
Acronis	suspicious
McAfee	Downloader-BPA.j.b
VBA32	Trojan.Click
Malwarebytes	Unruy.Trojan.Downloader.DDS
Panda	Trj/Genetic.gen
APEX	Malicious
ESET-NOD32	a variant of Win32/TrojanDownloader.Unruy.BK
Rising	Trojan.Unruy!1.AE5E (CLASSIC)
Yandex	Trojan.GenAsa!SjI7+I2F2TE
SentinelOne	Static AI – Malicious PE – Downloader
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Unruy.BK!tr.dldr
AVG	Win32:Unruy-AA [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.096