Trojan.SpamBot removal

The Trojan.SpamBot is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.SpamBot virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Created a service that was not started

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.SpamBot?


File Info:
crc32: 1C6C6754
md5: 954e5bfc83812346d1cd11a59f7d205d
name: 32.exe
sha1: 179dd32769c491758ff2e418c9b20efc94af5725
sha256: 38d3f45c15d354a76eaa73d2da717165dee22b8207fa87088685486019ff482d
sha512: 1d9eb7e3548e9082cccff9823ef7c205d9f161e35b66be22cc9737cfbf013781e56647fb54941945614310ba91f44904fe3341d03cb39779bbc41a1951503feb
ssdeep: 49152:mshUlx6PWNfwfFtSYlvenkSH9J/Djs6IIIIIIIR:rUloaUtSAvgNH9JXjIIIIIIIR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: PkgMgr.exe
FileVersion: 6.1.7601.23505 (win7sp1_ldr.160722-0600)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.23505
FileDescription: Windows Package Manager
OriginalFilename: PkgMgr.exe
Translation: 0x0409 0x04b0

Trojan.SpamBot also known as:

Bkav	W32.AIDetectVM.malware
MicroWorld-eScan	Trojan.Lupus.Gen.1
FireEye	Generic.mg.954e5bfc83812346
CAT-QuickHeal	Trojan.Generic
McAfee	Artemis!954E5BFC8381
ALYac	Trojan.Lupus.Gen.1
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 005534121 )
BitDefender	Trojan.Lupus.Gen.1
K7GW	Trojan ( 005534121 )
Cybereason	malicious.769c49
TrendMicro	Ransom.Win32.SHADE.SMB.hp
F-Prot	W32/Agent.BAE.gen!Eldorado
APEX	Malicious
Paloalto	generic.ml
GData	Trojan.Lupus.Gen.1
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Trojan:Win32/Morphisil.1216d606
NANO-Antivirus	Trojan.Win32.Morphisil.ftulri
Endgame	malicious (high confidence)
Emsisoft	Trojan.Lupus.Gen.1 (B)
Comodo	Malware@#2w5vm2k53l7kt
F-Secure	Trojan.TR/Crypt.Agent.ervvk
DrWeb	Trojan.Ssebot.2
Zillya	Trojan.Generic.Win32.917026
Invincea	heuristic
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
Cyren	W32/Agent.BAE.gen!Eldorado
Jiangmin	Trojan.Generic.eexee
Webroot	W32.Trojan.Gen
Avira	TR/Crypt.Agent.ervvk
MAX	malware (ai score=100)
Arcabit	Trojan.Lupus.Gen.1
AegisLab	Trojan.Win32.Lupus.4!c
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	PUA:Win32/OpenDownloadManager
Acronis	suspicious
VBA32	BScope.Trojan.Yakes
Ad-Aware	Trojan.Lupus.Gen.1
Malwarebytes	Trojan.SpamBot
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.GUSX
TrendMicro-HouseCall	Ransom.Win32.SHADE.SMB.hp
Tencent	Win32.Trojan.Falsesign.Hrys
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.74446422.susgen
Fortinet	W32/Kryptik.GLWT!tr
BitDefenderTheta	Gen:NN.ZexaF.34090.Yr1@aGcW@Mki
AVG	Win32:DangerousSig [Trj]
Avast	Win32:DangerousSig [Trj]
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Win32/Trojan.604

How to remove Trojan.SpamBot?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.