Trojan

How to remove “Trojan.Downloader.Harnig.AB”?

Malware Removal

The Trojan.Downloader.Harnig.AB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Downloader.Harnig.AB virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan.Downloader.Harnig.AB?


File Info:

name: 680F8C2C18C9F28F4564.mlw
path: /opt/CAPEv2/storage/binaries/2fd1346b9aee0a820800d27e8329e6db4a90790a4b7ef16bc25ce78ad8485b41
crc32: F598FEFD
md5: 680f8c2c18c9f28f456415b1477d3666
sha1: 0a4feaf988c6f4fb202ddac6ae90f93a4fd210af
sha256: 2fd1346b9aee0a820800d27e8329e6db4a90790a4b7ef16bc25ce78ad8485b41
sha512: e62d5566d68b0792ba1b9d85fadf1c0092206be034e15fc0fd90affc1ef8f67dbff6157fae7e11358a00fbd6cfe4cd10bb6a7d40aaceff8670fd544eba47b1c8
ssdeep: 192:46aVXC/SVlW6TxXdmxbVAkjLlAtOVoUv1MWzB8:IhC2lXiAmlAtnUtTz2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DDD23C937FE78470F35701BD74F2B1E79A2DBE33D20A41ADC691064E9535181578AD23
sha3_384: efcbae3ee1dc613344629ce2525be1e7b196ea80ae22219856b156d2869d7acaa06097d9e469d57e6bf5a85250a4958d
ep_bytes: 558bec81ec6c05000056576a1033f659
timestamp: 1987-09-11 01:35:02

Version Info:

0: [No Data]

Trojan.Downloader.Harnig.AB also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Small.l4Hz
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Downloader.Harnig.AB
FireEyeGeneric.mg.680f8c2c18c9f28f
ALYacTrojan.Downloader.Harnig.AB
CylanceUnsafe
VIPRETrojan.Downloader.Harnig.AB
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 00544ddf1 )
BitDefenderTrojan.Downloader.Harnig.AB
K7GWTrojan ( 00544ddf1 )
Cybereasonmalicious.c18c9f
ArcabitTrojan.Downloader.Harnig.AB
VirITTrojan.Win32.Generic.AFZ
CyrenW32/Downloader_Small.A!Gen
SymantecSpySheriff
APEXMalicious
ClamAVWin.Downloader.461-1
KasperskyTrojan-Downloader.Win32.Small.gme
NANO-AntivirusVirus.Win32.Gen-Resident.ccnd
CynetMalicious (score: 100)
ViRobotTrojan.Win32.A.Downloader.28672.Z
RisingTrojan.Generic@AI.100 (RDML:MQJVzqbG7jS9xTfDwJmweg)
Ad-AwareTrojan.Downloader.Harnig.AB
SophosMal/Generic-S
ComodoTrojWare.Win32.TrojanDownloader.Small.A@zs65q
DrWebTrojan.DownLoader.16594
ZillyaDownloader.Small.Win32.18282
TrendMicroTROJ_SMALL.LZY
McAfee-GW-EditionBehavesLike.Win32.Dropper.mz
Trapminemalicious.high.ml.score
EmsisoftTrojan.Downloader.Harnig.AB (B)
IkarusTrojan-Downloader.Win32.Small
JiangminTrojanDownloader.Small.edk
WebrootW32.Malware.Downloader
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=81)
MicrosoftTrojanDownloader:Win32/Small
SUPERAntiSpywareTrojan.Dropper/Packed
GDataTrojan.Downloader.Harnig.AB
GoogleDetected
AhnLab-V3Malware/Gen.Generic.R488384
McAfeeGenericRXSN-GB!680F8C2C18C9
VBA32Trojan.Zbot.01410
MalwarebytesRiskWare.Tool.CK
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_SMALL.LZY
TencentWin32.Trojan-downloader.Small.Wmtb
YandexPacked/FSG
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Buzus.enfq
FortinetW32/Small.GME!tr.dldr
AVGWin32:Small-EKJ [Trj]
AvastWin32:Small-EKJ [Trj]
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Trojan.Downloader.Harnig.AB?

Trojan.Downloader.Harnig.AB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment