Spy

About “Spyware.Phorpiex” infection

Malware Removal

The Spyware.Phorpiex is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Spyware.Phorpiex virus can do?

  • Authenticode signature is invalid

How to determine Spyware.Phorpiex?


File Info:

name: 6AEA077B35D89A3707F8.mlw
path: /opt/CAPEv2/storage/binaries/7d021636e8a41b1bc0537ed6ba86b348cef7f33756873ae05f11d8ceddac3102
crc32: 4F8D46CD
md5: 6aea077b35d89a3707f899505b4d621f
sha1: 044e776751eb25f63c20ce2f868a0d346c1c67c3
sha256: 7d021636e8a41b1bc0537ed6ba86b348cef7f33756873ae05f11d8ceddac3102
sha512: eeeb66cc52e97fff85c2d32f525acecbf48d3c2f2a3eacda82427a7c3257a9d49acd550fd87a9b215fe8c8b72de36b77368f3774939d3fbb55a1b0efa2b9f8ba
ssdeep: 384:Aibm861s9vIgmEVDu7Ua55dTxJjHjav8U9c+:O6G08Uardrva0U1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B5824B1FB8464227E1D0007096664B7BDAB9587A37C454EBF7E09AAE1A7C6C1FC3205F
sha3_384: c37f6405dfaf6fed5df5a12bb0c3c501129e4e62efc8aaa051830573a31a4d7fc29004b0b651fe7e6403ef51b699c66f
ep_bytes: e87c030000e936fdffff8bff558bec8b
timestamp: 2024-03-09 21:52:05

Version Info:

0: [No Data]

Spyware.Phorpiex also known as:

LionicTrojan.Win32.Phorpiex.b!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader46.744
MicroWorld-eScanGen:Heur.Mint.Zard.39
FireEyeGeneric.mg.6aea077b35d89a37
McAfeeGenericRXAA-AA!6AEA077B35D8
MalwarebytesSpyware.Phorpiex
ZillyaWorm.PhorpiexAGen.Win32.78
SangforDropper.Win32.Phorpiex.Vt4d
AlibabaTrojanDropper:Win32/Phorpiex.ebd6dd7d
Cybereasonmalicious.b35d89
BitDefenderThetaGen:NN.ZexaF.36802.buW@aGlDjtci
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Phorpiex_AGen.U
APEXMalicious
ClamAVWin.Dropper.Phorpiex-10008698-0
KasperskyHEUR:Trojan-Dropper.Win32.Phorpiex.gen
BitDefenderGen:Heur.Mint.Zard.39
NANO-AntivirusTrojan.Win32.Phorpiex.kjvfyt
AvastWin32:BotX-gen [Trj]
RisingWorm.Phorpiex!8.48D (TFE:5:IzOidLQVDjU)
EmsisoftGen:Heur.Mint.Zard.39 (B)
F-SecureHeuristic.HEUR/AGEN.1371853
VIPREGen:Heur.Mint.Zard.39
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
MAXmalware (ai score=84)
GoogleDetected
AviraHEUR/AGEN.1371853
VaristW32/S-c70f2e64!Eldorado
Antiy-AVLTrojan/Win32.Phorpiex.w
Kingsoftmalware.kb.a.999
XcitiumTrojWare.Win32.Injector.UOL@4q80ri
ArcabitTrojan.Mint.Zard.39
ZoneAlarmHEUR:Trojan-Dropper.Win32.Phorpiex.gen
GDataGen:Heur.Mint.Zard.39
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Phorpiex.R601456
VBA32BScope.TrojanDropper.Phorpiex
Cylanceunsafe
PandaTrj/Genetic.gen
TencentWin32.Trojan-Dropper.Phorpiex.Aujl
IkarusWorm.Win32.Phorpiex
FortinetW32/Phorpiex.W!tr
AVGWin32:BotX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (D)

How to remove Spyware.Phorpiex?

Spyware.Phorpiex removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment