Win32/Ainslot.A

By LoneStar in Worms

Threat Scorecard

Threat Level:	50 % (Medium)
Infected Computers:	990

First Seen:	February 16, 2011
Last Seen:	April 6, 2021
OS(es) Affected:	Windows

Win32/Ainslot.A is a self-replicating computer worm that makes copies of itself through removable and network drives. Win32/Ainslot.A is able to reach some computers from a single shared location. According to follow-up activities on targeted computers, Win32/Ainslot.A is classified as a browser hijacker because of its impact on web browser. Win32/Ainslot.A attempts to exclude its associated record from the Firewall list of program unauthorized to control web browser. If Win32/Ainslot.A succeeds, the browser will start getting commands from the Win32/Ainslot.A and will download other malware threats and undesired websites on request. The list of tasks ascribed to the Win32/Ainslot.A is subject to variantions by its creators and, therefore is not limited to browser hijacking.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	Generic7_c.BZGE
Fortinet	W32/Injector_Autoit.HG
McAfee	Artemis!4EC09FE2F8EF
Fortinet	W32/Dapato.ARTH!tr
AntiVir	Worm/Ainslot.A.1040
Kaspersky	Trojan-Dropper.Win32.Dapato.arth
ClamAV	Trojan.Kuluoz-208
CAT-QuickHeal	TrojanDropper.Dapato.arth
AVG	Dropper.Generic4.BUSH
Fortinet	W32/Agent.FRMFYWJ
DrWeb	Trojan.Packed.22079
BitDefender	Trojan.Generic.6802152
NOD32	probably a variant of Win32/Agent.GLCEYVM
McAfee	Artemis!01DE3FDBBE50
Kaspersky	Trojan-FakeAV.Win32.Windef.qct

SpyHunter Detects & Remove Win32/Ainslot.A

File System Details

Win32/Ainslot.A may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	svhost.exe	df6da7a5184bff0a5c6ca574077af52e	47
Name: svhost.exe MD5: df6da7a5184bff0a5c6ca574077af52e Size: 1.18 MB (1188846 bytes) Detections: 47 Type: Executable File Path: %TEMP%\362364 Group: Malware file Last Updated: February 6, 2013
2.	Licensemaker.exe	d216da1a3a1a749eaf04dbbf5c5ee4a1	28
Name: Licensemaker.exe MD5: d216da1a3a1a749eaf04dbbf5c5ee4a1 Size: 771.45 KB (771456 bytes) Detections: 28 Type: Executable File Path: %APPDATA%\congratulate Group: Malware file Last Updated: April 16, 2013
3.	wass.exe	c1106027bca9443edac4512fd8d422a6	21
Name: wass.exe MD5: c1106027bca9443edac4512fd8d422a6 Size: 502.6 KB (502608 bytes) Detections: 21 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: February 11, 2013
4.	dad1.exe	184cf0bb77f02e345749eb6a31f8cd2a	12
Name: dad1.exe MD5: 184cf0bb77f02e345749eb6a31f8cd2a Size: 502.6 KB (502608 bytes) Detections: 12 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: February 11, 2013
5.	WinDefender.Exe	3457d0a366f583896fb695c47003e374	11
Name: WinDefender.Exe MD5: 3457d0a366f583896fb695c47003e374 Size: 739.32 KB (739328 bytes) Detections: 11 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: February 6, 2013
6.	svhost.exe	a193900a298316e5e06cb1fe0b4f0fe7	9
Name: svhost.exe MD5: a193900a298316e5e06cb1fe0b4f0fe7 Size: 1 MB (1001673 bytes) Detections: 9 Type: Executable File Path: %USERPROFILE%\1043 Group: Malware file Last Updated: March 29, 2013
7.	xpbs.exe	0382d45b4fa4b16ff4ac13eed692d243	7
Name: xpbs.exe MD5: 0382d45b4fa4b16ff4ac13eed692d243 Size: 486.23 KB (486232 bytes) Detections: 7 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 8, 2013
8.	0M11BOB3P8.exe	6aa63f131a62db1b723f49ffaa872bb2	6
Name: 0M11BOB3P8.exe MD5: 6aa63f131a62db1b723f49ffaa872bb2 Size: 195.87 KB (195874 bytes) Detections: 6 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: January 21, 2013
9.	Fileadhesive.exe	bc73b362a9442cb96350b6737c9ff851	6
Name: Fileadhesive.exe MD5: bc73b362a9442cb96350b6737c9ff851 Size: 771.45 KB (771456 bytes) Detections: 6 Type: Executable File Path: %APPDATA%\senseulize Group: Malware file Last Updated: February 22, 2013
10.	halu.exe	a57297e1637762670ad37d99219086fe	4
Name: halu.exe MD5: a57297e1637762670ad37d99219086fe Size: 193.31 KB (193314 bytes) Detections: 4 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: January 21, 2013
11.	az.exe	ad1d3e7323ab3cb1e5b584bf70d2cae9	4
Name: az.exe MD5: ad1d3e7323ab3cb1e5b584bf70d2cae9 Size: 338.43 KB (338432 bytes) Detections: 4 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: March 29, 2013
12.	vbc.exe	a8f4f5a8ad4b8f1cea776ff92d1b7f12	4
Name: vbc.exe MD5: a8f4f5a8ad4b8f1cea776ff92d1b7f12 Size: 623.61 KB (623616 bytes) Detections: 4 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: March 4, 2013
13.	11CXEH0KOB.exe	013248f216797a7016ecab62420fa0d9	4
Name: 11CXEH0KOB.exe MD5: 013248f216797a7016ecab62420fa0d9 Size: 1.51 MB (1512309 bytes) Detections: 4 Type: Executable File Path: %APPDATA%\Windows Defender Group: Malware file Last Updated: April 29, 2013
14.	vbc.exe	bf23493c61b10f3b5f2c4ec46175c279	3
Name: vbc.exe MD5: bf23493c61b10f3b5f2c4ec46175c279 Size: 343.55 KB (343552 bytes) Detections: 3 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: February 6, 2013
15.	Extensoft Artisteer 4.1.0.59861 Multilingual.exe	22f19ce769d87c41a53a184f373eddef	3
Name: Extensoft Artisteer 4.1.0.59861 Multilingual.exe MD5: 22f19ce769d87c41a53a184f373eddef Size: 5.4 MB (5400576 bytes) Detections: 3 Type: Executable File Path: %USERPROFILE%\Documents\downloads\complete\Extensoft Artisteer 4.1.0.59861 Multilingual.rar Group: Malware file Last Updated: April 29, 2013
16.	WinDefender.Exe	213479bfdeffaa456e972587e09680fc	2
Name: WinDefender.Exe MD5: 213479bfdeffaa456e972587e09680fc Size: 280.57 KB (280576 bytes) Detections: 2 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: March 12, 2013
17.	430e88383a631e86cdcd40d4893ceac0f87c9f1d4a171d6673643e30a556a594	59c3740c78f676c2ff8c594a79514788	2
Name: 430e88383a631e86cdcd40d4893ceac0f87c9f1d4a171d6673643e30a556a594 MD5: 59c3740c78f676c2ff8c594a79514788 Size: 413.69 KB (413696 bytes) Detections: 2 Path: %SYSTEMDRIVE%\Users\<username>\Desktop\6041100740231168\430e88383a631e86cdcd40d4893ceac0f87c9f1d4a171d6673643e30a556a594 Group: Malware file Last Updated: April 6, 2021
18.	bot.exe	58a4d3ec2667249a90b80c53972d789c	2
Name: bot.exe MD5: 58a4d3ec2667249a90b80c53972d789c Size: 2.14 MB (2148780 bytes) Detections: 2 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 22, 2013
19.	svhost.exe	4ec09fe2f8efcc929071cc627d5e3546	2
Name: svhost.exe MD5: 4ec09fe2f8efcc929071cc627d5e3546 Size: 2.38 MB (2386302 bytes) Detections: 2 Type: Executable File Path: %USERPROFILE%\242265 Group: Malware file Last Updated: May 13, 2013
20.	winbot-dofus.exe	d0d03749a8e2a82d377f5d2021960c50	2
Name: winbot-dofus.exe MD5: d0d03749a8e2a82d377f5d2021960c50 Size: 837.12 KB (837120 bytes) Detections: 2 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: May 3, 2013
21.	SharedReg.exe	896214587e3d17c7682a65485b573a09	2
Name: SharedReg.exe MD5: 896214587e3d17c7682a65485b573a09 Size: 476.16 KB (476160 bytes) Detections: 2 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: April 22, 2013
22.	uRr6O1N5BfR.exe	69c845298dc3876add6653bc6987e3c4	2
Name: uRr6O1N5BfR.exe MD5: 69c845298dc3876add6653bc6987e3c4 Size: 520.7 KB (520704 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\OHdZ0Qt0w9E Group: Malware file Last Updated: May 8, 2013
23.	FRW8LBWL5V.exe	c783d030ce49c3152a406492f807faeb	1
Name: FRW8LBWL5V.exe MD5: c783d030ce49c3152a406492f807faeb Size: 195.28 KB (195280 bytes) Detections: 1 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: February 11, 2013
24.	XNR8LBWL5V.exe	9102be25255d00e7b8d494437e1d67e9	1
Name: XNR8LBWL5V.exe MD5: 9102be25255d00e7b8d494437e1d67e9 Size: 195.28 KB (195280 bytes) Detections: 1 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: January 21, 2013
25.	taskmgr.exe	537653fd19d6b60ec92156e5f1720c6a	1
Name: taskmgr.exe MD5: 537653fd19d6b60ec92156e5f1720c6a Size: 1.41 MB (1419776 bytes) Detections: 1 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: May 13, 2013
26.	awt43abr.exe	d59e95c397d6fc8cce604adc94a6d6ef	1
Name: awt43abr.exe MD5: d59e95c397d6fc8cce604adc94a6d6ef Size: 197.02 KB (197025 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: April 8, 2013
27.	synceng.exe	c4b1d742aa2c8107b0f2cd17eb2e4f86	1
Name: synceng.exe MD5: c4b1d742aa2c8107b0f2cd17eb2e4f86 Size: 416.25 KB (416256 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\Google Group: Malware file Last Updated: March 12, 2013
28.	__000518fe.lnk	ee18bdb08fdd1fbbaa838a6e7ae5cbe7	1
Name: __000518fe.lnk MD5: ee18bdb08fdd1fbbaa838a6e7ae5cbe7 Size: 276.63 KB (276632 bytes) Detections: 1 Type: Shortcut Path: %APPDATA% Group: Malware file Last Updated: May 8, 2013
29.	FB_3F13.tmp.exe	54d44ce1be408976d5ff1162bba783b5	1
Name: FB_3F13.tmp.exe MD5: 54d44ce1be408976d5ff1162bba783b5 Size: 613.8 KB (613808 bytes) Detections: 1 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: March 29, 2013

More files

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Win32/Ainslot.A

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Win32/Ainslot.A

File System Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen