Spy Trojan

What is “Trojan-Spy.Win32.Solmyr.vho”?

Malware Removal

The Trojan-Spy.Win32.Solmyr.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Solmyr.vho virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process attempted to delay the analysis task.
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Deletes its original binary from disk
  • Sniffs keystrokes
  • Installs an hook procedure to monitor for mouse events
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Spy.Win32.Solmyr.vho?


File Info:

crc32: CBD80688
md5: bb7831b05e13694dc04f60af29a8da21
name: BB7831B05E13694DC04F60AF29A8DA21.mlw
sha1: 8c9a80c2003075b731139d18a18bf308a62e0210
sha256: e655b06ea5b0dad25ad463a66bff53789b15763a87ddd17336aab9ebd5b2eb87
sha512: 09abda475576950b66d9c40398271f3685451a5f416ec399b0aa86331316940dfe420320f0fcd90584a3d4cd6b67a931a8730098da5290451b7f7a9460ca685c
ssdeep: 24576:hJmQ3QWWrDXNmFyC2SadnEHgeJhDIZyHvoUdEdNH4Nh564YI63PJQixes:hqrD9TC2SVACoUe91JxQLs
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan-Spy.Win32.Solmyr.vho also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00569be91 )
Elasticmalicious (high confidence)
DrWebTrojan.Siggen13.7431
CynetMalicious (score: 100)
ALYacGen:Variant.Graftor.833606
CylanceUnsafe
K7GWTrojan ( 00569be91 )
Cybereasonmalicious.05e136
CyrenW32/Injector.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent.ACBZ
APEXMalicious
AvastWin32:RATX-gen [Trj]
ClamAVWin.Malware.Mikey-9819889-0
KasperskyHEUR:Trojan-Spy.Win32.Solmyr.vho
BitDefenderGen:Variant.Graftor.833606
NANO-AntivirusTrojan.Win32.Solmyr.iuadjg
MicroWorld-eScanGen:Variant.Graftor.833606
TencentMalware.Win32.Gencirc.10ce4b4e
Ad-AwareGen:Variant.Graftor.833606
F-SecureTrojan.TR/Crypt.ULPM.Gen
BitDefenderThetaAI:Packer.97BA1BB21E
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.bb7831b05e13694d
EmsisoftGen:Variant.Graftor.833606 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Agentb.isv
AviraTR/Crypt.ULPM.Gen
eGambitUnsafe.AI_Score_81%
MicrosoftTrojan:Script/Phonzy.B!ml
ArcabitTrojan.Graftor.DCB846
ZoneAlarmHEUR:Trojan-Spy.Win32.Solmyr.vho
GDataGen:Variant.Graftor.833606
AhnLab-V3Malware/Gen.Reputation.C4261324
McAfeeGenericRXAA-FA!BB7831B05E13
MAXmalware (ai score=85)
VBA32BScope.Trojan.CMY3U
MalwarebytesBackdoor.BitRAT
PandaTrj/GdSda.A
RisingMalware.Heuristic!ET#99% (RDMK:cmRtazrHaM34fFC2Qg6cj5w1u/5w)
YandexTrojan.Agent!YLPV2U5CcAE
IkarusTrojan.MalPack
FortinetW32/Agent.ACBZ!tr
AVGWin32:RATX-gen [Trj]

How to remove Trojan-Spy.Win32.Solmyr.vho?

Trojan-Spy.Win32.Solmyr.vho removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment