About "Spyware.LokiStealer" infection

The Spyware.LokiStealer is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.LokiStealer virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Spyware.LokiStealer?


File Info:
crc32: D3171239
md5: a03368eb33266bfa408ade1d740e52d5
name: A03368EB33266BFA408ADE1D740E52D5.mlw
sha1: 9c4958b73f052ec79117a81d52c53e14f7a61d13
sha256: 2efd8877177aa2649cb83abbd2bc9ea126cd48eb91073e047e82e03be003b5ed
sha512: d2f20b248dd266a12f198f69d0698961b65430928ab4c09c448aed8e3c865d46321062fe63bb7ca68fd55aafd93e65705fd6d7f1da8c29e1149b1761f96cc450
ssdeep: 3072:Zfjcza97WYbn5xl5k2wYUju9BomypbF57a5YOCgTp8/oDhqc:pqm7WYbpGsUa9Gmypb7CYiOADhq
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: Anubis.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: Anubis.exe

Spyware.LokiStealer also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Siggen2.59267
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.MsilFC.S17036576
ALYac	Generic.Ransom.Hiddentear.A.C69E3525
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.b33266
ESET-NOD32	a variant of MSIL/Spy.Agent.BYF
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
ClamAV	Win.Ransomware.Hiddentear-9872794-0
Kaspersky	Trojan-Banker.MSIL.Evital.gen
BitDefender	Generic.Ransom.Hiddentear.A.C69E3525
MicroWorld-eScan	Generic.Ransom.Hiddentear.A.C69E3525
Ad-Aware	Generic.Ransom.Hiddentear.A.C69E3525
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34050.hm0@aKeBBEc
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.a03368eb33266bfa
Emsisoft	Generic.Ransom.Hiddentear.A.C69E3525 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1142073
eGambit	Unsafe.AI_Score_99%
Microsoft	Ransom:MSIL/Loki.DA!MTB
Arcabit	Generic.Ransom.Hiddentear.A.C69E3525
ZoneAlarm	Trojan-Banker.MSIL.Evital.gen
GData	MSIL.Trojan-Stealer.DarkStealer.A
AhnLab-V3	Trojan/Win32.RL_Evital.C4222179
McAfee	GenericRXME-MP!A03368EB3326
MAX	malware (ai score=82)
Malwarebytes	Spyware.LokiStealer
Rising	Stealer.Agent!1.B723 (CLASSIC)
Ikarus	Trojan.MSIL.PSW
Fortinet	MSIL/Agent.BYF!tr
AVG	Win32:TrojanX-gen [Trj]

How to remove Spyware.LokiStealer?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Spyware.LokiStealer” infection