Trojan

How to remove “Trojan.Spacecolon”?

Malware Removal

The Trojan.Spacecolon is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Spacecolon virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Spacecolon?


File Info:

name: C12098888985F21447EA.mlw
path: /opt/CAPEv2/storage/binaries/82161abc0942622bfa834b8713f8b26ace09699d22130c4cc6a9ad075bb97a82
crc32: 7B0903BD
md5: c12098888985f21447eaa75e8dfce942
sha1: b9cf8b18a84655d0e8ef1bb14c60763cefff9686
sha256: 82161abc0942622bfa834b8713f8b26ace09699d22130c4cc6a9ad075bb97a82
sha512: c2fee69e22772189d7bc196586486c5ba2a1c401e00771cd9637fa0cbb24e9a25f013383bf203647e5871e93951f82dd8e9bb29a868c82d2c1657287c666676c
ssdeep: 98304:+z0RQ490U9T8oH5+ihAVgVwBMIgJ3AvlLx0glfMLmrM6UetJnI1Y4+2uASja5ZE+:u69TpZ1hvVavldXPM3I2uTzm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19EA6BF1273C49639E0A21536089EF725557BF7306E39CE1B7AE00E4CAE74A43A63B747
sha3_384: 1145d8193bf667b0b53f8e693e8df82266d1471626f7acb68c9dbacefb1c7b6690767ec594223db5a7be2ffe62f7d075
ep_bytes: 558bec83c4f0535657b800f28000e869
timestamp: 2023-03-23 20:52:38

Version Info:

CompanyName: SMT Service
FileDescription: Host Process For Windows Services
LegalCopyright: Copyright SMT
ProductName: WdiEventSystem
Translation: 0x0409 0x04b0

Trojan.Spacecolon also known as:

BkavW32.Common.2F8D9C12
LionicTrojan.Win32.Spacecolon.7!c
AVGWin32:BankerX-gen [Trj]
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Tedy.445255
FireEyeGeneric.mg.c12098888985f214
SkyhighBehavesLike.Win32.Dropper.th
McAfeeTrojan-FVEL!C12098888985
MalwarebytesTrojan.Spacecolon
ZillyaTrojan.Delf.Win64.481
SangforBanker.Win32.Delf.Vt5j
K7AntiVirusTrojan ( 005a55cc1 )
AlibabaTrojanBanker:Win32/Banker.650d23ee
K7GWTrojan ( 005a55cc1 )
Cybereasonmalicious.88985f
BitDefenderThetaGen:NN.ZelphiCO.36802.@V0@a02sSjli
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win64/Spacecolon.A
CynetMalicious (score: 99)
KasperskyHEUR:Trojan-Banker.Win32.Delf.gen
BitDefenderGen:Variant.Tedy.445255
AvastWin32:BankerX-gen [Trj]
TencentMalware.Win32.Gencirc.13ac7fd2
EmsisoftGen:Variant.Tedy.445255 (B)
F-SecureTrojan.TR/Spy.Banker.zstxi
VIPREGen:Variant.Tedy.445255
TrendMicroTrojanSpy.Win32.DELRAT.AA
SophosMal/Generic-R
IkarusTrojan.Win64.Delf
JiangminTrojan.Banker.Delf.ug
AviraTR/Spy.Banker.zstxi
Antiy-AVLTrojan/Win64.Delf
KingsoftWin32.Trojan-Banker.Delf.gen
MicrosoftTrojan:Win32/Malgent!MSR
XcitiumMalware@#2czrip6f00wks
ArcabitTrojan.Tedy.D6CB47
ZoneAlarmHEUR:Trojan-Banker.Win32.Delf.gen
GDataGen:Variant.Tedy.445255
VaristW32/ABRisk.NFDG-1659
AhnLab-V3Backdoor/Win.Spacecolon.R593469
VBA32TScope.Trojan.Delf
ALYacGen:Variant.Tedy.445255
MAXmalware (ai score=100)
Cylanceunsafe
PandaTrj/Agent.MK
TrendMicro-HouseCallTrojanSpy.Win32.DELRAT.AA
RisingTrojan.Delf!8.67 (CLOUD)
MaxSecureTrojan.Malware.73650327.susgen
FortinetW64/Delf.C!tr
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)
alibabacloudTrojan.Win.UnkAgent

How to remove Trojan.Spacecolon?

Trojan.Spacecolon removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment