Spy Trojan

Trojan-Spy.Win32.Stealer.acbf removal tips

Malware Removal

The Trojan-Spy.Win32.Stealer.acbf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Stealer.acbf virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Expresses interest in specific running processes
  • Unconventionial language used in binary resources: Spanish (Modern)
  • The binary likely contains encrypted or compressed data.
  • Checks for the presence of known windows from debuggers and forensic tools
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • The following process appear to have been packed with Themida: A84D4BEB7AFE8F90E2113EFE20BEB6B0.mlw
  • Network activity detected but not expressed in API logs
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Trojan-Spy.Win32.Stealer.acbf?


File Info:

crc32: A2DDCE32
md5: a84d4beb7afe8f90e2113efe20beb6b0
name: A84D4BEB7AFE8F90E2113EFE20BEB6B0.mlw
sha1: d3a5dfbe1e9f1f8153baea25d39361df6563e2bb
sha256: 3c15a476c92a73d481bb2633b1f155ab4cbc184cd66285faa34f913b3191f6df
sha512: fddd32dfa991d571eaa90cfe456a56a31c3456c5530a4249c216de50f467153b7568eccacf04526e1c6c681340fb5ba489b52b5b6020f9ecd057a4762c3e0464
ssdeep: 49152:Rb6wKNPdei8Q65QwXnCUo0JVqMuGxEMgBF9YLKy3fUeJpQ1wa4ypZgdse1yzHAq:RSNPGQCQ7UoCHuyElPYLKyPDJsBpZ2H
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Spy.Win32.Stealer.acbf also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Stealer.l!c
Elasticmalicious (high confidence)
ClamAVWin.Malware.Razy-9897559-0
McAfeeArtemis!A84D4BEB7AFE
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
Cybereasonmalicious.e1e9f1
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMetagen [Malware]
CynetMalicious (score: 100)
KasperskyTrojan-Spy.Win32.Stealer.acbf
BitDefenderGen:Variant.Razy.945356
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanGen:Variant.Razy.945356
Ad-AwareGen:Variant.Razy.945356
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34170.rQW@aOH7tOCH
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
FireEyeGeneric.mg.a84d4beb7afe8f90
EmsisoftGen:Variant.Razy.945356 (B)
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GridinsoftTrojan.Heur!.032102A1
GDataGen:Variant.Razy.945356
AhnLab-V3Trojan/Win.Sabsik.C4660635
VBA32BScope.TrojanRansom.Foreign
MAXmalware (ai score=84)
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H09IT21
RisingTrojan.Generic@ML.94 (RDML:pUNpadEdUNWrqJIEG6JAAA)
FortinetW32/PossibleThreat
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml

How to remove Trojan-Spy.Win32.Stealer.acbf?

Trojan-Spy.Win32.Stealer.acbf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment