Spy Trojan

Trojan-Spy.Win32.Stealer.cngs information

Malware Removal

The Trojan-Spy.Win32.Stealer.cngs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Stealer.cngs virus can do?

  • Authenticode signature is invalid

How to determine Trojan-Spy.Win32.Stealer.cngs?


File Info:

name: A9AA7F0A8145D19E20F9.mlw
path: /opt/CAPEv2/storage/binaries/f6ab386e5e603c01a12980fe901a767f579ecb7592ed9649a932a34aa9e2afe4
crc32: 49B93829
md5: a9aa7f0a8145d19e20f94442b1b5dbec
sha1: dfe3481fd6be6fcafb2190ca7519cc58d26b17a3
sha256: f6ab386e5e603c01a12980fe901a767f579ecb7592ed9649a932a34aa9e2afe4
sha512: 109fb1574f2eba01bfcf200158c1c3144f6cad95bb7f3d1d11c250312177aa4916e12ecc3ae2a89846f3ab2af8d3d2e8dafab6cb568e49635549faa73137d436
ssdeep: 24576:4JizYOYs14egCVMzsoM7rOZ9NQmqVMB5V:4JeHIq6/V
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15F355B29EB0725F0DA275771859EDB7B9718BA148023AE7FFF5BDA08B0330163C86255
sha3_384: b63edaccc68f8ab7e7703244ddbff1761eee6dc11462b93506f7f943a520b5ea84bc949cefc2dfa390e929922720848f
ep_bytes: 83ec0cc705b823510000000000e82e5f
timestamp: 2022-09-03 12:54:10

Version Info:

0: [No Data]

Trojan-Spy.Win32.Stealer.cngs also known as:

Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.32450
MicroWorld-eScanGen:Variant.Fragtor.137304
FireEyeGen:Variant.Fragtor.137304
McAfeeGenericRXUB-SK!A9AA7F0A8145
CylanceUnsafe
K7AntiVirusTrojan ( 005976881 )
K7GWTrojan ( 005976881 )
ArcabitTrojan.Fragtor.D21858
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HQOF
APEXMalicious
KasperskyTrojan-Spy.Win32.Stealer.cngs
BitDefenderGen:Variant.Fragtor.137304
AvastWin32:Trojan-gen
Ad-AwareGen:Variant.Fragtor.137304
EmsisoftGen:Variant.Fragtor.137304 (B)
McAfee-GW-EditionArtemis
SophosMal/Generic-S
IkarusTrojan.Win32.RedlineStealer
GoogleDetected
AviraTR/Crypt.Agent.aixpt
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ZoneAlarmTrojan-Spy.Win32.Stealer.cngs
GDataWin32.Trojan.PSE.1PJLW8D
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Generic.C5231537
VBA32BScope.TrojanPSW.RedLine
ALYacGen:Variant.Fragtor.137304
MAXmalware (ai score=89)
MalwarebytesMalware.AI.4214964351
RisingTrojan.Kryptik!8.8 (TFE:5:qFgFsCC2vGK)
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/DotNetPacker.A!tr
AVGWin32:Trojan-gen

How to remove Trojan-Spy.Win32.Stealer.cngs?

Trojan-Spy.Win32.Stealer.cngs removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment