Spy

What is “Spyware.Guildma”?

Malware Removal

The Spyware.Guildma is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Spyware.Guildma virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Spyware.Guildma?


File Info:

crc32: 223F122A
md5: eda096af52d2f3b086bf8bddfefe86ed
name: upload_file
sha1: 100dc66bc6bdafcf5a04720143110ac5fbcc78c2
sha256: c7792c59c0e894da0ead1ea91aecab0342edc4077070766290f453bf5c7cfe7e
sha512: 00906f7abfde7f75a4fc968465a561c8608dc0428c3b2b8c0858f6f80c89d137503386eaacf5309865575903b3d81b36f4bdebb280f9e896149975724014e285
ssdeep: 98304:78N1c9QWCPqkeYna4N+UvK1dIGY+boFJCAW7gmkWvOAXiYmAvKCAGwRxZVYOoKB:78bR/mv
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Spyware.Guildma also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.34718671
ALYacTrojan.GenericKD.34718671
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
K7AntiVirusSpyware ( 00570a661 )
BitDefenderTrojan.GenericKD.34718671
K7GWSpyware ( 00570a661 )
InvinceaMal/Generic-S
SymantecTrojan.Gen.MBT
AvastWin32:Trojan-gen
ClamAVWin.Malware.Agent-9775929-0
AlibabaTrojanSpy:Win32/Guildma.b531421b
Ad-AwareTrojan.GenericKD.34718671
EmsisoftTrojan.GenericKD.34718671 (B)
ComodoMalware@#1r4tbig4emx5e
DrWebTrojan.PWS.Banker1.36615
McAfee-GW-EditionBehavesLike.Win32.Injector.wh
FireEyeTrojan.GenericKD.34718671
SophosMal/Generic-S
MAXmalware (ai score=88)
MicrosoftPUA:Win32/Vigua.A
ArcabitTrojan.Generic.D211C3CF
GDataTrojan.GenericKD.34718671
McAfeeArtemis!EDA096AF52D2
VBA32BScope.TrojanPSW.Banker
MalwarebytesSpyware.Guildma
ESET-NOD32a variant of Win32/Spy.Guildma.CD
TrendMicro-HouseCallTROJ_GEN.R002H0CJB20
RisingSpyware.Guildma!8.FBB0 (TFE:6:OL01fx3hCtK)
IkarusTrojan-Dropper.Delf
FortinetW32/Guildma.CD!tr.spy
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Spyware.Guildma?

Spyware.Guildma removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment