Trojan

Trojan.PWS.Stimilina removal guide

Malware Removal

The Trojan.PWS.Stimilina is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.PWS.Stimilina virus can do?

  • Unconventionial language used in binary resources: Turkish
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

coronavirusstatus.space

How to determine Trojan.PWS.Stimilina?


File Info:

crc32: B6D7DF1E
md5: c4852ee6589252c601bc2922a35dd7da
name: C4852EE6589252C601BC2922A35DD7DA.mlw
sha1: 4c8a7c3dabf12748201c496525a37ec65577cbbb
sha256: fda64c0ac9be3d10c28035d12ac0f63d85bb0733e78fe634a51474c83d0a0df8
sha512: d144cb9bd81118d853e831f4890c4f32b9c5d59fd5188fca4056670263c6315481d406fc8ec31347db0b0d226a57f3fcc003f5d73591ed5f04c4f6c9a67a65dd
ssdeep: 3072:FuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/bxg/:xzx7ZApszolIo7lf/ipT/b
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2006-2006 R52lx7uII43Qe8bLEI4WF4fei8AcB7gfO5VXC5vIcBefgk6c9n7GCLY9V9aqq25a, Inc. All rights reserved.
InternalName: isoburn.exe
FileVersion: 5.7.2.8
CompanyName: Microsoftxae Cabinet File API
Comments: ua3wZihXZV8VxNGA2rw2NIidlFqhxbCO94u9mTaHyegSaqSlpmH4inWQvI7srdkb1ZhCMXwpnXGMsOFY1tHCVXYMPRMStQuZzBsBRUuq
ProductName:
ProductVersion: 5.7.2.8
FileDescription: MFC Language Specific Resources
Translation: 0x0000 0x04b0

Trojan.PWS.Stimilina also known as:

BkavW32.AIDetect.malware1
K7AntiVirusPassword-Stealer ( 0052f9a71 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.24943
CynetMalicious (score: 99)
CAT-QuickHealRansom.MazeIH.S12879142
ALYacTrojan.PWS.Stimilina
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.40079
SangforRansom.Win32.Foreign_18.se
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanPSW:Win32/Ransomware.83df1dd2
K7GWPassword-Stealer ( 0052f9a71 )
Cybereasonmalicious.658925
CyrenW32/Delf_Troj.D.gen!Eldorado
SymantecTrojan.Coinstealer
ESET-NOD32a variant of Win32/PSW.Delf.OSF
ZonerTrojan.Win32.74405
APEXMalicious
AvastWin32:PWSX-gen [Trj]
ClamAVWin.Ransomware.Delf-6651871-0
KasperskyHEUR:Trojan-PSW.Win32.Agent.gen
BitDefenderTrojan.PWS.ZNN
NANO-AntivirusTrojan.Win32.Stealer.fflqpr
ViRobotTrojan.Win32.S.Infostealer.116736
MicroWorld-eScanTrojan.PWS.ZNN
TencentMalware.Win32.Gencirc.10b0cce1
Ad-AwareTrojan.PWS.ZNN
SophosMal/Generic-R + Troj/PWS-CJJ
ComodoTrojWare.Win32.PWS.Stimilina.O@8037s1
BitDefenderThetaAI:Packer.5E4A1A741C
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGenericRXGI-KI!C4852EE65892
FireEyeGeneric.mg.c4852ee6589252c6
EmsisoftTrojan.PWS.ZNN (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.PSW.Coins.buh
WebrootW32.Trojan.Gen
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.27044F8
ZoneAlarmHEUR:Trojan-PSW.Win32.Generic
GDataWin32.Trojan-Stealer.KBot.B
TACHYONTrojan-Spy/W32.DP-Azorult.116736
AhnLab-V3Trojan/Win32.Delf.R260844
Acronissuspicious
McAfeeGenericRXGI-KI!C4852EE65892
MAXmalware (ai score=100)
VBA32BScope.TrojanPSW.Stealer
MalwarebytesSpyware.AzorUlt
PandaTrj/CI.A
TrendMicro-HouseCallTrojanSpy.Win32.CLIPBANKER.SMMR
RisingStealer.AZORult!1.B7AE (CLASSIC)
YandexTrojan.GenAsa!zpkWsvf3gpo
IkarusTrojan-Spy.Azorult
FortinetW32/Delf.OSF!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.PWS.Stimilina?

Trojan.PWS.Stimilina removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment