Trojan

Trojan.Mardom.PN.19 removal instruction

Malware Removal

The Trojan.Mardom.PN.19 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Mardom.PN.19 virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Exhibits behavior characteristic of iSpy Keylogger
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

How to determine Trojan.Mardom.PN.19?


File Info:

crc32: E0F7B1CB
md5: 573a20ce7f8eb117d5a91c313bd08db0
name: 573A20CE7F8EB117D5A91C313BD08DB0.mlw
sha1: 178f6f92b83b7fd711cd1eaeb52f9fd1154e762f
sha256: 266bc9d812766b485db2a1ba545bfdfd476c205a253dd7d89d4a27b4e94be75a
sha512: 6dad45e8863dbb5e7d0ea71c12c1cfa44a4537cfafd34f2b5fab953c14f665bfffa68ba1d9f9e2774382eea6f9b347d46cb22adf48da487de21d7100a9e2b538
ssdeep: 768:HvkWz9OD5F3iiHFwVK2+MKlGIqh8DjHkU5WSUT7rmqSKKt+5F4Fuxtizu:8WROD5Y62+NGD+vkxNrRSJ+5txtizu
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: BpQBRyaYH6ECDAKrIP4DF
Assembly Version: 4.42.4.4
InternalName: TEST.exe
FileVersion: 4.4.42.42
CompanyName: BpQBRyaYH6ECDAKr
LegalTrademarks: BpQBRyaYH6ECDAKrIP
Comments: BpQBRyaYH6ECDAKrI
ProductName: BpQBRyaYH6ECDAKrIP4
ProductVersion: 4.4.42.42
FileDescription: BpQBRyaYH6ECDAK
OriginalFilename: TEST.exe

Trojan.Mardom.PN.19 also known as:

K7AntiVirusTrojan ( 700000121 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Inject3.10274
CynetMalicious (score: 99)
ALYacGen:Trojan.Mardom.PN.19
CylanceUnsafe
ZillyaTrojan.Injector.Win32.451006
SangforVirus.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 700000121 )
Cybereasonmalicious.e7f8eb
CyrenW32/MSIL_Injector.TT.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.PZN
APEXMalicious
AvastWin32:KeyloggerX-gen [Trj]
ClamAVWin.Malware.Msilkrypt-6903622-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Trojan.Mardom.PN.19
NANO-AntivirusTrojan.Win32.BotSiggen.efyfno
MicroWorld-eScanGen:Trojan.Mardom.PN.19
TencentWin32.Trojan.Generic.Suny
Ad-AwareGen:Trojan.Mardom.PN.19
SophosML/PE-A + Mal/MSIL-AX
ComodoTrojWare.MSIL.Injector.QAO@7e9uqr
BitDefenderThetaAI:Packer.8D924A351E
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGenericRXAX-MQ!573A20CE7F8E
FireEyeGeneric.mg.573a20ce7f8eb117
EmsisoftGen:Trojan.Mardom.PN.19 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.aputj
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Generic.ASMalwS.1D9F02B
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftBackdoor:MSIL/Bladabindi
ArcabitTrojan.Mardom.PN.19
GDataGen:Trojan.Mardom.PN.19
AhnLab-V3Trojan/Win32.MSIL.R295859
McAfeeGenericRXAX-MQ!573A20CE7F8E
MAXmalware (ai score=83)
MalwarebytesBackdoor.NanoCore
PandaTrj/CI.A
YandexTrojan.Agent!sWDPHadvQnI
IkarusTrojan.MSIL.Injector
FortinetMSIL/Injector.QAI!tr
AVGWin32:KeyloggerX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.Mardom.PN.19?

Trojan.Mardom.PN.19 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment