Spyware.StealerNeko information

The Spyware.StealerNeko is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.StealerNeko virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Spyware.StealerNeko?


File Info:
crc32: CFD1393C
md5: c11c9d344923c11a8c236f73a580c5f7
name: C11C9D344923C11A8C236F73A580C5F7.mlw
sha1: cbc8bd29ebfe5551a8219a0bf70b8072dd583b0d
sha256: 58f2b43a5f9a1fe5d8b2ab46c51dfa2ffa4c6e2b1774b9becc08e165cf297a7f
sha512: be829d147e480d2c1d66b2f291c4b83334e565a13a32f279eaa66a8c238f8b66d253292d356aa7bd51f33858ba90d8a2fe9cf4addfa32714236e2884b41a6f54
ssdeep: 6144:8f+BLtABPDdtNoC56e3zJrTpVkXhD8vLnrAuQ0ZFHYocn/axQ2:Ctqe3zJrTohD8zkuQOHYr/R
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Hehe
Assembly Version: 1.0.0.0
InternalName: To_Edwin.exe
FileVersion: 0.0.0.7
CompanyName: Hehe
LegalTrademarks: Hehe
Comments: Hehe
ProductName: Hehe
ProductVersion: 0.0.0.7
FileDescription: Hehe
OriginalFilename: To_Edwin.exe

Spyware.StealerNeko also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.StealerNET.76
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	IL:Trojan.MSILZilla.5013
CrowdStrike	win/malicious_confidence_70% (W)
Cybereason	malicious.44923c
Cyren	W32/CoinMiner.FA.gen!Eldorado
Symantec	Infostealer.Calibous
ESET-NOD32	a variant of MSIL/PSW.Agent.RML
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
ClamAV	Win.Packed.Datastealer-9856291-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	IL:Trojan.MSILZilla.5013
MicroWorld-eScan	IL:Trojan.MSILZilla.5013
Ad-Aware	IL:Trojan.MSILZilla.5013
BitDefenderTheta	Gen:NN.ZemsilF.34236.um0@aObIiuo
McAfee-GW-Edition	GenericRXOV-UU!C11C9D344923
FireEye	Generic.mg.c11c9d344923c11a
Emsisoft	IL:Trojan.MSILZilla.5013 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1143520
eGambit	Unsafe.AI_Score_96%
Microsoft	PWS:MSIL/Stealgen.GA!MTB
Arcabit	IL:Trojan.MSILZilla.D1395
GData	MSIL.Trojan.PSE.LEM1A9
AhnLab-V3	Trojan/Win.Generic.C4384021
McAfee	GenericRXOV-UU!C11C9D344923
MAX	malware (ai score=87)
Malwarebytes	Spyware.StealerNeko
Rising	Stealer.Agent!1.D483 (CLASSIC)
Ikarus	Trojan.MSIL.PSW
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.RML!tr
AVG	Win32:MalwareX-gen [Trj]

How to remove Spyware.StealerNeko?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Spyware.StealerNeko information