Trojan.Popwin removal instruction

The Trojan.Popwin is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Popwin virus can do?

Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Popwin?


File Info:
crc32: 18DE239F
md5: c41f1f54e46da6d996fbbe24218a9c04
name: C41F1F54E46DA6D996FBBE24218A9C04.mlw
sha1: 6fdac1cbe1ce9fe336f4380941b22ef92a6a2fb3
sha256: cd022cc7cfdfc42b05005ff02665690bc4eeed05aa0a15180e7dff07f3350a65
sha512: f54e7cff2d06da1a9eb8af11cbe3611320f6f51da89b5b9d36e5a01a5649703d4047d91f3dd6a87d005bc64453452fc61b41e7cc4185a3875befbd590f9e1c2c
ssdeep: 192:SzTD6onobdyV7SM4o4feeEEZpaHelF5AJvf68:SD3obq7TweUpGiF5A3
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan.Popwin also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
ClamAV	Win.Trojan.Genome-1424
CAT-QuickHeal	Trojan.GenericIH.S11131820
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.DC
Cybereason	malicious.be1ce9
APEX	Malicious
Cynet	Malicious (score: 100)
NANO-Antivirus	Riskware.Win32.TokensDelims.jvge
ViRobot	Trojan.Win32.Small.9728.E
Comodo	TrojWare.Win32.Click.~BAAA@7p3m
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.c41f1f54e46da6d9
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Agent.fax
eGambit	Unsafe.AI_Score_58%
Microsoft	TrojanDownloader:Win32/Locky!ml
GData	Win32.Trojan.Small.A
AhnLab-V3	Trojan/Win32.Dropbat.R15219
McAfee	Artemis!C41F1F54E46D
VBA32	Trojan.Popwin
Panda	Trj/KillWin.AG
Rising	Malware.Heuristic!ET#80% (RDMK:cmRtazoi7Rk/BOaEHUhIH3Qrb0HN)
Ikarus	Trojan.Win32.Small
Paloalto	generic.ml

How to remove Trojan.Popwin?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Popwin removal instruction