home

averiaupdater.exe

The executable averiaupdater.exe has been detected as malware by 11 anti-virus scanners. This is a setup program which is used to install the application. Infected by an entry-point obscuring polymorphic file infector which will create a peer-to-peer botnet and receives URLs of additional files to download. The file has been seen being downloaded from updater.averia.ws.
Version:
1.9.0.0

MD5:
cae619d865eea051f369f92e2bf6b4ae

SHA-1:
b6929b6ae040344dac63e422f91c732dfdd62e85

Scanner detections:
11 / 68

Status:
File is infected by a Virus

Explanation:
The file is infected by a polymorphic file infector virus.

Analysis date:
11/24/2024 12:52:01 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:SaliCode
160214-1

AVG
Win32/Sality
2015.0.4530

Dr.Web
Win32.Sector.30
9.0.1.05190

Emsisoft Anti-Malware
Win32.Sality
10.0.0.5366

ESET NOD32
Win32/Sality.NBA virus
7.0.302.0

F-Secure
Win32.Sality.3
5.15.21

Kaspersky
Virus.Win32.Sality
15.0.0.562

McAfee
Virus.W32/Sality.gen.z
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.213.6222.0

Norman
Win32.Sality.3
03.02.2016 10:30:35

VIPRE Antivirus
Threat.4721115
46962

File size:
2.5 MB (2,657,792 bytes)

Product version:
1.3.0.0

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\averiaupdater.exe

File PE Metadata
Compilation timestamp:
10/3/2015 8:21:51 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:nHyAtzOSKc8ogZqr4Kl47T6t0o7Z2O6XZOKrzC0pSF6K8y45s7N7Nm:d0SN8ogQr4Ki72t0o7ZiXZOKrzC0pSSz

Entry address:
0x72E630

Entry point:
FF, C0, 81, DE, 73, 8A, 74, C9, 8D, 35, 8B, D2, B4, 47, B0, 69, F2, 0F, BE, E8, FE, C3, 0F, AF, CF, EB, 11, 69, EA, E1, 65, 81, 9C, F7, C5, 5C, AA, BC, 8C, B9, 6B, 9B, B7, 0B, BD, D4, 03, A1, E6, 0F, AF, DA, 0F, AF, ED, 8D, 01, 84, D0, 85, D3, 0F, AF, DE, F2, 50, 0F, BE, D9, 8D, 0D, 7D, D3, C9, E2, 4E, 5F, F6, C2, 46, 8B, EE, 33, D7, F6, C3, B6, 25, 86, F3, 51, BC, F7, C5, 62, 7A, FF, DE, 8B, ED, F6, C2, 5C, 0F, AF, DE, 73, 05, 8B, CF, 4B, 89, FF, 73, 0C, 81, DA, F9, 95, B8, E3, 81, E5, 16, 75, B6, 37, E8...
 
[+]

Code size:
2.4 MB (2,555,904 bytes)

The file averiaupdater.exe has been seen being distributed by the following URL.

http://updater.averia.ws/.../AveriaUpdater.exe

Remove averiaupdater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.