Trojan

Should I remove “Trojan-Banker.Win32.NeutrinoPOS”?

Malware Removal

The Trojan-Banker.Win32.NeutrinoPOS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Banker.Win32.NeutrinoPOS virus can do?

  • Unconventionial language used in binary resources: Hebrew
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan-Banker.Win32.NeutrinoPOS?


File Info:

crc32: 1C8298E2
md5: 838372a1721a68de5a9cd92542811769
name: 838372A1721A68DE5A9CD92542811769.mlw
sha1: 194680798a1e7dd297f892b04abc3e93a36e18e0
sha256: 0ef10771c574dc6e07e2ead19db1e9977314493b6d7c74fecc7da626d235104c
sha512: e93b8ea1656a2dcb1df9a6023dcb0fa6d502e62dadc754a17fce01c29e8c9728c7d0827e5e5a6900175baf1dca52a6ab485918bd3ae00f59f1bb87f343e6d853
ssdeep: 3072:7gQWK85g/gb63ALrkduoMtDXyPt0jYXYsOhs2CAkbvQExDHIPUC1KyFwSN9SSYVX:cL5g/024AdufDXyPtAcAOJAcZQqv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Banker.Win32.NeutrinoPOS also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053305e1 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader26.10882
MicroWorld-eScanTrojan.GenericKD.34249869
CAT-QuickHealTrojan.Chapak.ZZ6
ALYacTrojan.GenericKD.34249869
ZillyaTrojan.NeutrinoPOS.Win32.106
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderTrojan.GenericKD.34249869
K7GWTrojan ( 0053305e1 )
Cybereasonmalicious.1721a6
CyrenW32/S-12a196c3!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Kryptik.GCKD
APEXMalicious
KasperskyHEUR:Trojan-Banker.Win32.NeutrinoPOS.gen
NANO-AntivirusTrojan.Win32.Miner.exlfcw
TencentMalware.Win32.Gencirc.10b82082
Ad-AwareTrojan.GenericKD.34249869
SophosML/PE-A + Mal/GandCrab-D
ComodoTrojWare.Win32.Ransom.Foreign.A@7i19jk
TrendMicroRansom_HPGANDCRAB.SMONT
McAfee-GW-EditionPacked-ZG!838372A1721A
FireEyeGeneric.mg.838372a1721a68de
EmsisoftTrojan.GenericKD.34249869 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Banker.NeutrinoPOS.bm
eGambitUnsafe.AI_Score_94%
MicrosoftTrojan:Win32/Gandcrab.GM!MTB
AegisLabTrojan.Win32.Generic.7!c
GDataTrojan.GenericKD.34249869
Acronissuspicious
McAfeePacked-ZG!838372A1721A
MAXmalware (ai score=99)
VBA32TrojanBanker.NeutrinoPOS
MalwarebytesTrojan.Crypt
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_HPGANDCRAB.SMONT
RisingTrojan.Kryptik!8.8 (CLOUD)
YandexTrojan.GenAsa!L7WZ9FxcCdw
IkarusTrojan.Brsecmon
FortinetW32/GenKryptik.CPZI!tr
Paloaltogeneric.ml

How to remove Trojan-Banker.Win32.NeutrinoPOS?

Trojan-Banker.Win32.NeutrinoPOS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment