About “Trojan-Banker.Win32.Agent.aeio” infection

The Trojan-Banker.Win32.Agent.aeio is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Banker.Win32.Agent.aeio virus can do?

Creates RWX memory
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup

How to determine Trojan-Banker.Win32.Agent.aeio?


File Info:
crc32: 03883A8F
md5: 78a1ec6ee4013e85d326b3936d220cd6
name: 78A1EC6EE4013E85D326B3936D220CD6.mlw
sha1: 69899fe612c8f01b37d6f1dd8c4e0738ab571f67
sha256: ce2b02efd3bef6b4340c693ba97a6ea4389fbd566242f15e2f7a4d2e747fac44
sha512: 98751e33cf7c31d63c2f921abf18a3fbd4bc762b6b8b02a31178fb980516467b17c4c31598c9a8a5adc99cfaf140306741aa4af3eff52205a2cded6b66af6521
ssdeep: 24576:40aWgWHZscZqsBA9tDm2azuavCH9lBsSuk2DxbByXdYfLI:4JMFZiIKlySukXa
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) 2016 NVIDIA Corporation. All rights reserved.
FileVersion: 1.2.0.0
CompanyName: NVIDIA
ProductName: NVIDIA Container
ProgramID: NVIDIA Container
ProductVersion: 1.2.0.0
FileDescription: NVIDIA Container
OriginalFilename: NvContainer.exe
Translation: 0x0409 0x04e4

Trojan-Banker.Win32.Agent.aeio also known as:

Bkav	W32.Common.8A9E232D
K7AntiVirus	Trojan ( 00523f661 )
Elastic	malicious (high confidence)
DrWeb	Trojan.ClipSpy.27
ALYac	Gen:Heur.Mint.SP.Sneaky.1
Zillya	Trojan.Agent.Win32.880232
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	TrojanBanker:Win32/CryptoJacker.4af9a01f
K7GW	Trojan ( 00523f661 )
Cybereason	malicious.ee4013
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ClipBanker.CF
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Banker.Win32.Agent.aeio
BitDefender	Gen:Heur.Mint.SP.Sneaky.1
NANO-Antivirus	Trojan.Win32.ClipBanker.eyjwbf
MicroWorld-eScan	Gen:Heur.Mint.SP.Sneaky.1
Tencent	Malware.Win32.Gencirc.114ce1ef
Ad-Aware	Gen:Heur.Mint.SP.Sneaky.1
Sophos	Troj/Agent-AYLK
BitDefenderTheta	Gen:NN.ZelphiF.34678.QP0@aCcLIhji
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_BTCCLIP.SMMR
McAfee-GW-Edition	BehavesLike.Win32.Infected.th
FireEye	Generic.mg.78a1ec6ee4013e85
Emsisoft	Gen:Heur.Mint.SP.Sneaky.1 (B)
Jiangmin	Trojan.Banker.Agent.agc
Avira	TR/ClipBanker.cbaoi
Microsoft	Trojan:Win32/CryptoJacker.A
Arcabit	Trojan.Mint.SP.Sneaky.1
GData	Gen:Heur.Mint.SP.Sneaky.1
AhnLab-V3	Trojan/Win32.Banker.R222073
McAfee	GenericRXDW-LQ!78A1EC6EE401
MAX	malware (ai score=83)
VBA32	TScope.Trojan.Delf
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_BTCCLIP.SMMR
Rising	Trojan.ClipBanker!8.5FB (C64:YzY0OqmMMwlgBaSe)
Ikarus	Trojan.Win32.Clipbanker
Fortinet	W32/Generic.AC.403b7c!tr
AVG	Win32:Malware-gen
Qihoo-360	HEUR/QVM20.1.9EEB.Malware.Gen

How to remove Trojan-Banker.Win32.Agent.aeio?

Trojan-Banker.Win32.Agent.aeio removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X