Trojan.Sennoma (file analysis)

The Trojan.Sennoma is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Sennoma virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Presents an Authenticode digital signature
• Creates RWX memory
• Mimics the system’s user agent string for its own requests
• The binary likely contains encrypted or compressed data.
• Executed a process and injected code into it, probably while unpacking
• A system process is generating network traffic likely as a result of process injection
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Trojan.Sennoma?

File Info:
crc32: 3EE09A7C
md5: 4366f35a9a0184a751fda55727a0b170
name: 4366F35A9A0184A751FDA55727A0B170.mlw
sha1: 09db6a6b87d8ac4754b6d0ad8570cca97d12ffcb
sha256: 704e4fab19da21718fff7eae11e951132d8205fb8f866b2abdeb1df72743bcd8
sha512: 3ae7e24b6f3c4976e497aa5aeca39639801fc46113f75c878130c5b42835efa1b2f6b344129fca38d69bb81483564fb0130376d8c9893d480403c1d3fc4dc8a5
ssdeep: 3072:dwu7VuVNOUP+96PzDYD4KXEFyI/Qu1zM8V6kNX+EEqiQl:+YYVNY63YD4mEFypuSP0XIg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan.Sennoma also known as:

How to remove Trojan.Sennoma?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.