How to remove “Trojan-Spy.Win32.Stealer.eahn”?

The Trojan-Spy.Win32.Stealer.eahn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Spy.Win32.Stealer.eahn virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan-Spy.Win32.Stealer.eahn?


File Info:
name: 4CEAD0313879EC40A8D3.mlw
path: /opt/CAPEv2/storage/binaries/2fef5ddc148f632eb9469c9678f005a881ec7acbf9858cafceb4fc810ae8cff0
crc32: 47BE3953
md5: 4cead0313879ec40a8d3345e4eeb586a
sha1: b8a3ab7e6b9fa71e4261901d78490d9c2553b1aa
sha256: 2fef5ddc148f632eb9469c9678f005a881ec7acbf9858cafceb4fc810ae8cff0
sha512: 8e0873c3aff8fd80b35141056eda9934c1c7d95fa85772c04c0600ad43f3c7ffffdca4e7d8268be0129e679690b3b56ce412a4401a7919cbeb1a076452667758
ssdeep: 98304:972ihbKxIdQMW3SUDBTBrHJWGs2NyqeoNE/7SRYY2VymGu/m6zHAlA64TRRbCvu:97LdHmX3BTVHJack+YlGlSRRbCvu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T186760137F0DA2471F8731A36B8A25432393E189CE08729A929F4ABD7F572D484F47791
sha3_384: f558e32af4bb70467e4aa0ed52ce0ab0347b8bccb3e6c8d14dff24f2bea05d840391122563a8627db3473580be229f89
ep_bytes: 5589e583ec08c7042402000000ff1590
timestamp: 2023-06-15 17:17:52

Version Info:
CompanyName: Spin
FileDescription: The easiest way for businesses to pay and get paid.
FileVersion: 14.10.25.4
InternalName: economicsupport.exe
Copyright: All reserved
OriginalFilename: economicsupport.exe
ProductName: Variety Annual
ProductVersion: 14.10.25.4
Translation: 0x0409 0x04b0

Trojan-Spy.Win32.Stealer.eahn also known as:

Bkav	W32.Common.A37A1C6D
Lionic	Trojan.Win32.Stealer.12!c
McAfee	Artemis!4CEAD0313879
Zillya	Trojan.Stealer.Win32.104929
Sangfor	Spyware.Win32.Agent.V4hf
Alibaba	TrojanSpy:Win32/Stealer.933d3356
Kaspersky	Trojan-Spy.Win32.Stealer.eahn
Avast	Win32:Trojan-gen
Webroot	W32.Trojan.Gen
ZoneAlarm	Trojan-Spy.Win32.Stealer.eahn
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H07G223
MaxSecure	Trojan.Malware.211118088.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS

How to remove Trojan-Spy.Win32.Stealer.eahn?

Trojan-Spy.Win32.Stealer.eahn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X