Trojan

Trojan.Shutdowner removal

Malware Removal

The Trojan.Shutdowner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Shutdowner virus can do?

  • Executable code extraction
  • Attempts to modify desktop wallpaper
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Shutdowner?


File Info:

crc32: F357F616
md5: 676aa097834bc255e24217d20bbdc4ca
name: 676AA097834BC255E24217D20BBDC4CA.mlw
sha1: dc8cde87f4e473f79c109e0e612fae98515b5ec7
sha256: 2424c12248680e83525d67a992210a8fab1aeb674a8c9ae3f17cc2ddc025017e
sha512: fb5082eaf946fbae80bed4f709e9fa432066d657b3215f97e35502d6726afc7377857b0a7a9d287633adf50a3ee3a759925562bab70ea77f9a13f60578101053
ssdeep: 6144:xcFzg1LT9nJdsTT6UPJxGdRVLIWxqDmDB6p/op:xci1LwvJkAWxqSDBA/op
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x040c 0x04b0
LegalCopyright: Olivier RAVET
InternalName: Papier Peint
FileVersion: 2.02
CompanyName: Chase
ProductName: PapierPeint
ProductVersion: 2.02
OriginalFilename: Papier Peint.exe

Trojan.Shutdowner also known as:

LionicTrojan.Win32.Shutdowner.4!c
CylanceUnsafe
ZillyaTrojan.Shutdowner.Win32.4063
SymantecTrojan.Gen
AvastWin32:Malware-gen
ClamAVWin.Trojan.Shutdowner-6812905-1
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Trojan.dm
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!676AA097834B
VBA32Trojan.Shutdowner
PandaGeneric Malware
TrendMicro-HouseCallTROJ_GEN.R002H0CKH21
YandexTrojan.Shutdowner!SPyXU8WGrAs
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Shutdowner.GCG!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Shutdowner?

Trojan.Shutdowner removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment