Categories: Malware

Win64/Bazar.AC (file analysis)

The Win64/Bazar.AC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/Bazar.AC virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Win64/Bazar.AC?


File Info:
crc32: 399EFE4Emd5: 896173f9c5ae0824c38ea6e9be0d6437name: upload_filesha1: b9de1e92ae4a5029083a837dcbbebd8e0e5b1097sha256: 177b312a0c7c2d03be3b2916505fb3e9fdefe785330c74ac29e89cb22656367esha512: 48dfafbabc76ee2be3b0d646ee83b42410732f8434940f1ede02d6ed45b9d98c7994b6605eb4a41c4d148cb14436d99407f7a08f0e6175936aae123a38a62105ssdeep: 49152:/G1dUMJsA2f8ui3OPvBPWJ/H15qfYNJAdk57ZWSBz7FdTiJOSpNXkmO8WlvjM0cb:3kFZ7YNXk58YvjMxmuttype: PE32+ executable (GUI) x86-64, for MS Windows
Version Info:
LegalCopyright: x7248x6743x6240x65e0xff0cx7ffbx7248x4e0dx7a76xff0cx4ec5x4fddx7559x7f72x540dx6743x3002InternalName: YUVPlayer.exeFileVersion: 4.0.0.0CompanyName: x8fdfx601dx5802x5de5x4f5cx5ba4ProductName: YUVx64adx653ex5668ProductVersion: 4.0.0.0FileDescription: YUVPlayerOriginalFilename: YUVPlayer.exeTranslation: 0x0804 0x04b0

Win64/Bazar.AC also known as:

MicroWorld-eScan	Trojan.GenericKD.34793822
FireEye	Trojan.GenericKD.34793822
ALYac	Trojan.GenericKD.34793822
AegisLab	Trojan.Win32.Zenpak.4!c
K7AntiVirus	Trojan ( 005712021 )
BitDefender	Trojan.GenericKD.34793822
K7GW	Trojan ( 005712021 )
TrendMicro	TROJ_FRS.VSNTJG20
Symantec	Trojan.Maltrec.TS
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Zenpak.axeq
Alibaba	Backdoor:Win64/Bazarldr.307e4271
ViRobot	Trojan.Win32.Z.Bazar.2976704
Rising	Trojan.Kryptik!8.8 (TFE:5:7RgPTWYhcmG)
Ad-Aware	Trojan.GenericKD.34793822
Sophos	Mal/Generic-S
Comodo	fls.noname@0
F-Secure	Trojan.TR/Zenpak.xzjyl
DrWeb	BackDoor.Bazar.17
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	MalCert-S.CU (A)
Ikarus	Trojan.Win64.Crypt
Webroot	W32.Trojan.Bazarloader
Avira	TR/Zenpak.xzjyl
MAX	malware (ai score=88)
Microsoft	Trojan:Win64/Bazarldr.G!MSR
Arcabit	Trojan.Generic.D212E95E
ZoneAlarm	Trojan.Win32.Zenpak.axeq
GData	Win64.Trojan.Kryptik.77BLET
McAfee	Artemis!896173F9C5AE
Malwarebytes	Trojan.Bazar
Panda	Trj/CI.A
ESET-NOD32	Win64/Bazar.AC
TrendMicro-HouseCall	TROJ_FRS.VSNTJG20
Fortinet	W64/Agent.35F2!tr
AVG	Win64:CrypterX-gen [Trj]
Avast	Win64:CrypterX-gen [Trj]
Qihoo-360	Win32/Trojan.8dc