About “Trojan-Banker.Win32.ChePro.nikf” infection

The Trojan-Banker.Win32.ChePro.nikf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Banker.Win32.ChePro.nikf virus can do?

• Presents an Authenticode digital signature
• Creates RWX memory
• Reads data out of its own binary image
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Network activity detected but not expressed in API logs

How to determine Trojan-Banker.Win32.ChePro.nikf?

File Info:
crc32: 9814FEF1
md5: 34404cbd63be9620885368460b387695
name: 34404CBD63BE9620885368460B387695.mlw
sha1: 60c64006ee78c63eea23037213c1edaacfa59e88
sha256: 41e82e314fceb906d8618dbaa5d622cdea1b453ed74e3d358b5aafee0030490a
sha512: d659688427cede51674ef89972812054affa0689332eeadca1bf9af65babc7d2f1c2975af68eb6a50ea6da84547df6861f2105ac1cdcae53fd0685c844d22a2d
ssdeep: 49152:KDESR4ctGua0qM8xTsP7VQNfnVLmLELJ6AXXe2dAayKlKvq/gZcE9hSzISQq+tte:tSj4umMaQjUCLAXjdrgphScSH+t7dq
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: xa9 Pronomeca Senigi Company
FileVersion: Samideano Mia Corporation
CompanyName: Pronomeca Senigi Company
Comments: This installation was built with Actual Installer: http://www.actualinstaller.com
ProductName: NepTV Ofhjivj O Samo De 
ProductVersion: Samideano Mia Corporation
FileDescription: NepTV Ofhjivj O Samo De  Installation
Translation: 0x0409 0x04e4

Trojan-Banker.Win32.ChePro.nikf also known as:

How to remove Trojan-Banker.Win32.ChePro.nikf?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.